Static task
static1
Behavioral task
behavioral1
Sample
1ab2f0a64d7acb304f6ccd9b27504ac56614108471b565dc620bc126116b685f.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1ab2f0a64d7acb304f6ccd9b27504ac56614108471b565dc620bc126116b685f.exe
Resource
win10v2004-20240412-en
General
-
Target
1ab2f0a64d7acb304f6ccd9b27504ac56614108471b565dc620bc126116b685f
-
Size
41KB
-
MD5
17d72d1ca0b915956c03f8505b409bb2
-
SHA1
a9292de7f4123a32c3777e32a89567d5fe72dcb7
-
SHA256
1ab2f0a64d7acb304f6ccd9b27504ac56614108471b565dc620bc126116b685f
-
SHA512
7ff8d4b4b5c0f61b2bfbe1714191827592f07fd9c50eb14fe573d52ad332218fdc4a2783f1378408f6430e8fa63a33af20596deffa2b89b5fe341fa542b25fc6
-
SSDEEP
768:szM/e9xPnxqPsFUqj70sBDAtOlfiNJnrAyl2J1Z:3/Q5xIEn70slA0fUJc2Oj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1ab2f0a64d7acb304f6ccd9b27504ac56614108471b565dc620bc126116b685f
Files
-
1ab2f0a64d7acb304f6ccd9b27504ac56614108471b565dc620bc126116b685f.exe windows:4 windows x86 arch:x86
411c26819234a12cc52aaaf849f1d844
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualAlloc
CloseHandle
CreateFileW
DeleteFileW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetCurrentDirectoryW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
wininet
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 903B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ