Static task
static1
Behavioral task
behavioral1
Sample
de352a5fe56c91faaa6ec8ff5690f45a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de352a5fe56c91faaa6ec8ff5690f45a.exe
Resource
win10v2004-20240226-en
General
-
Target
de352a5fe56c91faaa6ec8ff5690f45a
-
Size
153KB
-
MD5
de352a5fe56c91faaa6ec8ff5690f45a
-
SHA1
b1b887992f97b99304178ec6a9e92aa14b6e2f56
-
SHA256
0fad8c0f3b39d0098d22dcc93fd159c5fcfbdc6a3b07a4db5012fc2ae59adf2f
-
SHA512
235cb32e9babfe49fccc4ceeecd3753516960b0b844fc69956918193a9f1c9047b0140b7217af2386ba37856647163631e2c3a07d43bf5e883fb04356c583f89
-
SSDEEP
384:vHXb9JXzrgcxOT9RIDYcYCFEB0jGCXcPsslUldQ+7+f1wq11eSDG:/XbjzkcxU18a5CXcPsi0Q+S1Z11Fa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de352a5fe56c91faaa6ec8ff5690f45a
Files
-
de352a5fe56c91faaa6ec8ff5690f45a.exe windows:4 windows x86 arch:x86
3978daa6377ff5c274597696892e0031
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CreateStreamOnHGlobal
kernel32
GlobalFree
FindFirstFileA
CloseHandle
CreateFileA
CreateFileMappingA
DeleteFileA
ExitProcess
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
WideCharToMultiByte
UnmapViewOfFile
Sleep
ReadFile
MultiByteToWideChar
MapViewOfFile
LoadLibraryA
FindNextFileA
GlobalAlloc
GetVolumeInformationA
GetTickCount
GetProcAddress
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileSize
GetCurrentProcess
GetComputerNameA
FindClose
user32
ReleaseDC
wsprintfA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegCloseKey
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
shlwapi
StrStrIA
StrCmpNA
StrChrA
wsock32
WSAStartup
socket
send
recv
gethostname
closesocket
connect
gdi32
BitBlt
CreateCompatibleDC
CreateDCA
CreateDIBSection
DeleteDC
DeleteObject
GetDIBColorTable
GetDeviceCaps
SelectObject
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE