Static task
static1
Behavioral task
behavioral1
Sample
33eb97b372e003edada3803ef0873930f63750d1752fde0b5fefeb66cec11b02.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
33eb97b372e003edada3803ef0873930f63750d1752fde0b5fefeb66cec11b02.exe
Resource
win10v2004-20240426-en
General
-
Target
33eb97b372e003edada3803ef0873930f63750d1752fde0b5fefeb66cec11b02
-
Size
1.5MB
-
MD5
3c9886d7f8fb7c20a66ecc930a190760
-
SHA1
0e5acc9b9414e442d4ab9855276b9df92569c1c5
-
SHA256
33eb97b372e003edada3803ef0873930f63750d1752fde0b5fefeb66cec11b02
-
SHA512
c531e617e320c051def0dc6dd208729c0f7cbac173011575e10b61980ab45c3ab5d4a4248ebb30dcba788e26b11329a1dfc0d508588774d9874ce179c0b43777
-
SSDEEP
24576:jn4Kfe8fL5z8YadcbzrQM5OwxOuLQnvlnHBoWFa5esE8gvcV9bltz3IZ5S+LZ3x:j4K2A3ad2rt5OwguLctnHGWFY3gvcV9u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 33eb97b372e003edada3803ef0873930f63750d1752fde0b5fefeb66cec11b02
Files
-
33eb97b372e003edada3803ef0873930f63750d1752fde0b5fefeb66cec11b02.exe windows:5 windows x86 arch:x86
6abcb7ccceccda2622f1dc293fd9c685
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAWaitForMultipleEvents
crypt32
CertFreeCertificateContext
kernel32
TerminateProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetFocus
advapi32
CloseServiceHandle
shell32
SHGetFolderPathW
ntdll
NtResumeThread
bcrypt
BCryptGenRandom
Sections
.text Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.be0 Size: 455KB - Virtual size: 455KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.be1 Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 445KB - Virtual size: 444KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ