Static task
static1
General
-
Target
D3775911_V415-01.exe
-
Size
12.8MB
-
MD5
6d9d63cddcb65c41914f32a0f45c34dd
-
SHA1
e0570d65278dee03582c6ef8ae0aa2db4dd78fac
-
SHA256
01c1871e70e20caffd330793795be46c5bd9c1e368acdc128f85a70d443d874d
-
SHA512
26b9fc40f2c346887068dd4b27404e7bd01838f53d2b8440ee3fbe1c990ec19e2ff44091431ebbc2daeeac012af005d09a9e58cf774922206ccd035e98bb906a
-
SSDEEP
196608:0QeuIRhfTjs7ySau2IbFAxm4Ih+dvlpE8v5Okp5zPwnXu26rnLAUdBub5RAO0zrE:0PTIslxzvEG5Ok8+dHDdINyzof1P1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource D3775911_V415-01.exe
Files
-
D3775911_V415-01.exe.exe windows:4 windows x86 arch:x86
Password: S1BinaryVault
328d49feb2832e92bd7939aa2ac8bf7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetDriveTypeA
GetFileAttributesA
CloseHandle
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
FindClose
GetLastError
FileTimeToSystemTime
FindFirstFileA
DeleteFileA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetFilePointer
GetFileType
ReadFile
WriteFile
CreateDirectoryA
GetCurrentDirectoryA
GetCommandLineA
GetVersion
GetModuleFileNameA
HeapCreate
VirtualFree
VirtualAlloc
GetFullPathNameA
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetStdHandle
SetHandleCount
GetStdHandle
GetStartupInfoA
SetEndOfFile
GetStringTypeA
GetStringTypeW
GetProcAddress
GetModuleHandleA
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
LoadLibraryA
HeapReAlloc
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ