Static task
static1
Behavioral task
behavioral1
Sample
httxt2dbm.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
httxt2dbm.exe
Resource
win10v2004-20240221-en
General
-
Target
httxt2dbm.exe
-
Size
48KB
-
MD5
c738e9567eef0facbd1dec5ce934119f
-
SHA1
a7ecdcbe7e5a72f7b6b514488505f0550e090d07
-
SHA256
8e96689a20389e90f815834425514fde74cb3075c00c6f6e194b9e18859e4dec
-
SHA512
d3cdaa33b9b702e1316ede89e2ace0203974547ba1ba9129a4b4e4a8416dd277ff8c99c66627a286a2c4571f459fd9a8c61f9b409b2887a83c99574fbeb6993a
-
SSDEEP
768:nH8xXVgPrcUeB18GAmUCLJs/fkMsc5BddR+XaTNE8QsiMU/qho:nEFszeB16mfLa/cMHNE8Qs9Oqho
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource httxt2dbm.exe
Files
-
httxt2dbm.exe.exe windows:4 windows x86 arch:x86
6b5a0a93a37266754d8e6417288af8f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
_onexit
__dllonexit
memmove
wcsncmp
atoi
_ftol
modf
strrchr
malloc
free
strncmp
strchr
fprintf
_iob
_errno
wcscpy
strerror
_isctype
__mb_cur_max
_pctype
_stricmp
kernel32
GetFileInformationByHandle
GetFileType
LocalFree
GetExitCodeProcess
TerminateProcess
FormatMessageA
CloseHandle
SetStdHandle
GetStdHandle
SetFilePointer
GetLastError
CreateFileA
CreateFileW
SetLastError
CreateEventA
GetOverlappedResult
WaitForSingleObject
ReadFile
PeekNamedPipe
WriteFile
TlsAlloc
TlsFree
GetVersionExA
GetProcAddress
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CreateMutexA
DeleteCriticalSection
ReleaseMutex
SetEvent
Sleep
LockFile
LockFileEx
UnlockFile
UnlockFileEx
advapi32
FreeSid
AllocateAndInitializeSid
wsock32
WSAStartup
WSACleanup
ntohl
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ