Static task
static1
Behavioral task
behavioral1
Sample
HWIDGEN.exe
Resource
win10-20240221-en
General
-
Target
HWIDGEN.zip
-
Size
2.7MB
-
MD5
2622212232a72f0ffdcc58fe350dafda
-
SHA1
c3d3f997f228a2a5ca3d0388e5b29b3130e2c174
-
SHA256
02efdb564a339ad236e3cd4b078e2e772dd866d8781571d686e8fe6ec0167458
-
SHA512
93afd00aebe6a45ba61207c25251ac450e8f2b8532d3ced57bfddeb933338706b835267b859a2053e1181c7c259ee1289035c907f5b69aa0a8e0f2ee31eb43b6
-
SSDEEP
49152:OHkchonMiLF6Lv5rLfz1X9Z5CxR7SaghM2IV61nS7FIQTS7W1rGXC7tQ3C7:JchonMipC/gxR7qa2tS76K4oqXC7tQ3O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HWIDGEN.exe
Files
-
HWIDGEN.zip.zip
Password: mysubsarethebest
-
HWIDGEN.exe.exe windows:5 windows x86 arch:x86
Password: mysubsarethebest
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
%$*& Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
&*$% Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 107KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE