Static task
static1
Behavioral task
behavioral1
Sample
3805feab049722c056cae6248d36af9f4be7d0f4a7dcd2b71d17b2cfeb60152d.exe
Resource
win7-20240221-en
General
-
Target
3805feab049722c056cae6248d36af9f4be7d0f4a7dcd2b71d17b2cfeb60152d
-
Size
64KB
-
MD5
b66613bef905a70b3b6e8de3275d5bae
-
SHA1
0d23f229c7bcd4c4840502459152a903c366d467
-
SHA256
3805feab049722c056cae6248d36af9f4be7d0f4a7dcd2b71d17b2cfeb60152d
-
SHA512
7a19fddefbf23a096ef52e346350027c8c30779a1ed08d99f1866ff5be20a27e7c693fb95f4f5613349dd77b1684718a5c4de676b8c9c32322771a2f0ee15dc7
-
SSDEEP
1536:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdQouZqL:K0GAqjuVZ6rNOFuM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3805feab049722c056cae6248d36af9f4be7d0f4a7dcd2b71d17b2cfeb60152d
Files
-
3805feab049722c056cae6248d36af9f4be7d0f4a7dcd2b71d17b2cfeb60152d.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
HSUDHUHW Size: - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSUDHUHW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE