Static task
static1
Behavioral task
behavioral1
Sample
3f58c4d27a63e7cac54346db50bde86788e6706e6f730cbff29862284f2150cb.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
3f58c4d27a63e7cac54346db50bde86788e6706e6f730cbff29862284f2150cb.exe
Resource
win10v2004-20240508-en
General
-
Target
3f58c4d27a63e7cac54346db50bde86788e6706e6f730cbff29862284f2150cb.exe
-
Size
16KB
-
MD5
e497f871973ee2d1e1a42680efa369e3
-
SHA1
a694ee791e04b0f60ed48e304a694faec9437e4d
-
SHA256
3f58c4d27a63e7cac54346db50bde86788e6706e6f730cbff29862284f2150cb
-
SHA512
5bf27e35d2a7b1d420926b751dab6bb586b69e20f7f18946215e5ae17e1330c79a1da182f977ec8f2615af37e267c6558b66d4172f3cf96386a848ef5bdea034
-
SSDEEP
192:g+ACeYqeviSJDCWzvYeFqfrPwolraE/cmOPoR4y3Qkuu5LjjfO7If++iuLa3wRy:vqYqepmsvVFqf7kmOPoR4XkHoIKKfR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f58c4d27a63e7cac54346db50bde86788e6706e6f730cbff29862284f2150cb.exe
Files
-
3f58c4d27a63e7cac54346db50bde86788e6706e6f730cbff29862284f2150cb.exe.exe windows:6 windows x86 arch:x86
7b4aa3f51180154f434776a3c7ed1e5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
InternetConnectW
InternetOpenW
kernel32
GetEnvironmentVariableA
CreateDirectoryA
GetStdHandle
VerSetConditionMask
HeapFree
GetProcessHeap
CreateProcessA
GetModuleFileNameA
GetProcAddress
LoadLibraryW
lstrcmpW
lstrcpyW
lstrcatA
HeapAlloc
lstrlenW
CopyFileA
VerifyVersionInfoW
WriteConsoleA
WriteConsoleW
HeapReAlloc
GetLastError
CreateMutexA
Sleep
lstrcmpA
lstrcatW
advapi32
RegCreateKeyW
RegCloseKey
GetUserNameW
RegSetKeyValueA
RegQueryValueExW
RegOpenKeyW
shell32
ord680
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ