Static task
static1
Behavioral task
behavioral1
Sample
037495347edb1b9a0aa45ed8b7004b3dff155f8d2b3fe1ce755246ac71d7dbf4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
037495347edb1b9a0aa45ed8b7004b3dff155f8d2b3fe1ce755246ac71d7dbf4.exe
Resource
win10v2004-20240226-en
General
-
Target
037495347edb1b9a0aa45ed8b7004b3dff155f8d2b3fe1ce755246ac71d7dbf4
-
Size
232KB
-
MD5
190565630511478c2b63a016e89f7a70
-
SHA1
5d7ec198d642700d157dadc4cd581a6cd8f2312b
-
SHA256
037495347edb1b9a0aa45ed8b7004b3dff155f8d2b3fe1ce755246ac71d7dbf4
-
SHA512
b8532eb247d480d30499bf6f42506d8f1d6c4e42056201544b6fe83d63ddaa37ab5b5d6911013ce86b3da9fb53c62aae55da39cf2aebc2f76ee55b30b954a3dc
-
SSDEEP
6144:XI/Q9FvVYvpPt7jfL0oWH8Rmi3R+fZVwub:7yP9fLXBouk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 037495347edb1b9a0aa45ed8b7004b3dff155f8d2b3fe1ce755246ac71d7dbf4
Files
-
037495347edb1b9a0aa45ed8b7004b3dff155f8d2b3fe1ce755246ac71d7dbf4.exe windows:4 windows x86 arch:x86
7abbc32e03c96e9f20b0a83be4c289be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
snmpapi
SnmpSvcGetUptime
SnmpUtilAsnAnyCpy
SnmpUtilAsnAnyFree
SnmpUtilDbgPrint
SnmpUtilIdsToA
SnmpUtilMemAlloc
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpUtilOctetsCmp
SnmpUtilOctetsCpy
SnmpUtilOctetsFree
SnmpUtilOidAppend
SnmpUtilOidCmp
SnmpUtilOidCpy
SnmpUtilOidFree
SnmpUtilOidNCmp
SnmpUtilOidToA
SnmpUtilPrintAsnAny
SnmpUtilPrintOid
SnmpUtilVarBindFree
SnmpUtilVarBindListCpy
SnmpUtilVarBindListFree
kernel32
GetEnvironmentStrings
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
IsBadWritePtr
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WriteFile
RtlUnwind
HeapFree
VirtualFree
GetLogicalDriveStringsA
WriteConsoleA
VirtualProtect
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 667KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE