Static task
static1
Behavioral task
behavioral1
Sample
htdigest.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
htdigest.exe
Resource
win10v2004-20240221-en
General
-
Target
htdigest.exe
-
Size
68KB
-
MD5
f7b33649651343db0827d6a8a107bd75
-
SHA1
ef3c12aa645e7e03858b327e78c40ce68f35f242
-
SHA256
f0c70c7ece9aaf5f677a63a069ca95191a9c0203339321c72cc49e078e7809be
-
SHA512
111736a2cdc0e95afe20e471949b2b5788363bce10b3f2e585fe76c2cd88e33c7a97cbab7e2fdfae2aa3810370637876470cdc72956a64f70c9577be76621ae1
-
SSDEEP
1536:2M01JycB72EBsAXY6nKAF70KSUwqbNE8Qs7tqKp:E/eFwLnKA4UFNE8Qs3p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource htdigest.exe
Files
-
htdigest.exe.exe windows:4 windows x86 arch:x86
6976a13d19c363d77b6e976ed4b16bcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
_XcptFilter
_exit
_onexit
__dllonexit
bsearch
tolower
toupper
atoi
_errno
memchr
_ftol
modf
strncmp
wcsncmp
_iob
fputs
_getch
fputc
realloc
__p__environ
__p__wenviron
strerror
wcslen
wcscpy
free
malloc
srand
rand
strchr
signal
sprintf
_pctype
__mb_cur_max
_isctype
_strnicmp
exit
kernel32
LoadLibraryExA
LoadLibraryExW
SetErrorMode
UnlockFileEx
UnlockFile
LockFileEx
LockFile
LoadLibraryA
GetProcAddress
GetVersionExA
GetEnvironmentVariableW
GetEnvironmentVariableA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeW
GetExitCodeProcess
TerminateProcess
LeaveCriticalSection
CloseHandle
SetStdHandle
GetStdHandle
SetFilePointer
GetLastError
CreateFileA
CreateFileW
SetLastError
CreateEventA
GetOverlappedResult
WaitForSingleObject
ReadFile
PeekNamedPipe
WriteFile
FormatMessageA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GlobalFree
GetCommandLineW
TlsAlloc
TlsFree
LocalFree
GetFileType
GetFileInformationByHandle
FindFirstFileA
GetDriveTypeA
GetFullPathNameW
FindClose
FindFirstFileW
FreeLibrary
GetSystemTimeAsFileTime
Sleep
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
ReleaseMutex
SetEvent
advapi32
FreeSid
AllocateAndInitializeSid
wsock32
ntohl
WSAStartup
WSACleanup
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ