Static task
static1
General
-
Target
HTTP_Downloader.exe
-
Size
511KB
-
MD5
3554b5536a3976d74b0901a6bdf3733c
-
SHA1
e1a907d5740494a2f633a368dd6c65c62c4a03b0
-
SHA256
c61429d6baa9ec479f4c849c708e6e827f0737b61e724bfe61788fb6f0abeb46
-
SHA512
4093a06d968aa621d23960468548a69c685b10145a71fbb84803c4f9f5f3ca4240799b1dcb65103ccffde020bf1f1630298a52ff25200e4d9a6220148c4e107d
-
SSDEEP
12288:1Bklwoo2horGmkIEMUcforGmkTVF1F0vAlRU7udNZFBJA7rOj:1Bk+oo2clRUadNZzJA2j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HTTP_Downloader.exe
Files
-
HTTP_Downloader.exe.exe windows:5 windows x64 arch:x64
9dd4bb82337f5e7c5ce6df2eef89a297
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ReleaseSemaphore
ExitThread
CloseHandle
LeaveCriticalSection
PostQueuedCompletionStatus
TryEnterCriticalSection
WaitForSingleObject
lstrlenW
GlobalAlloc
WideCharToMultiByte
GlobalFree
EnterCriticalSection
InitializeCriticalSection
CreateIoCompletionPort
MultiByteToWideChar
GetFileAttributesW
GlobalReAlloc
GetLastError
MoveFileWithProgressW
CreateThread
CreateSemaphoreW
DeleteCriticalSection
lstrlenA
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetLocalTime
DeleteFileW
WriteFile
DeviceIoControl
Sleep
GetQueuedCompletionStatus
WaitForMultipleObjects
SetThreadPriority
GlobalUnlock
GlobalSize
GlobalLock
CreateDirectoryW
GetProcAddress
UnlockFileEx
ReadFile
GetFileSize
LockFileEx
CreateFileW
SetEndOfFile
SetFilePointer
FileTimeToSystemTime
SetFileValidData
SetFilePointerEx
SetFileTime
MoveFileW
SetLastError
lstrcmpiW
lstrcmpW
FreeLibrary
LoadLibraryW
SetErrorMode
lstrcpynW
ExitProcess
ReleaseMutex
GetCurrentProcess
CreateMutexW
GetSystemInfo
LocalFree
GetCommandLineW
GetModuleFileNameW
GetModuleHandleW
lstrcmpA
GetTickCount
VerifyVersionInfoW
VerSetConditionMask
MulDiv
SetThreadExecutionState
lstrcmpiA
user32
SendMessageW
DestroyIcon
SendNotifyMessageW
SetFocus
ScreenToClient
SetLayeredWindowAttributes
GetParent
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
ExitWindowsEx
MessageBoxW
GetMessageW
DispatchMessageW
TranslateMessage
IsDialogMessageW
SetWindowPos
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
RegisterClassExW
LoadCursorW
SetForegroundWindow
ShowWindow
FindWindowW
RegisterClipboardFormatW
LoadImageW
GetSystemMetrics
ReleaseDC
GetDC
SystemParametersInfoW
DestroyMenu
SetMenuItemInfoW
EnableMenuItem
InsertMenuItemW
CreatePopupMenu
CreateMenu
CheckMenuItem
FlashWindow
IsWindowVisible
IsIconic
InvalidateRect
EnableWindow
GetIconInfo
CreateIconIndirect
FillRect
ReleaseCapture
SetScrollInfo
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetScrollInfo
GetClientRect
SetTimer
KillTimer
GetCursorPos
CallWindowProcW
DestroyWindow
GetKeyState
SetCapture
EndPaint
FrameRect
GetSysColor
DrawIconEx
BeginPaint
TrackPopupMenu
ClientToScreen
GetDoubleClickTime
GetWindowDC
TrackMouseEvent
DefWindowProcW
DrawTextW
SendMessageA
GetSysColorBrush
MapWindowPoints
GetWindow
GetFocus
IsZoomed
GetWindowRect
GetClipboardData
IsClipboardFormatAvailable
GetMonitorInfoW
MonitorFromWindow
LoadIconW
PostMessageW
LockWorkStation
SetCursor
OffsetRect
MonitorFromRect
RegisterWindowMessageW
SetMenu
PostQuitMessage
ScrollWindow
SetScrollPos
DrawFocusRect
Sections
.text Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ