Static task
static1
Behavioral task
behavioral1
Sample
2653acf8f6c4afa54b438f4668ded1a3.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2653acf8f6c4afa54b438f4668ded1a3.exe
Resource
win10v2004-20240704-en
General
-
Target
2653acf8f6c4afa54b438f4668ded1a3.bin
-
Size
442KB
-
MD5
2653acf8f6c4afa54b438f4668ded1a3
-
SHA1
a0b3407eea03e2b9abb79b3f313982d9cdaf7419
-
SHA256
49d2c7b65a6d185d6a563ee9ce2f880b5b4af4a0fd6d0bb821899153ef0a9cdf
-
SHA512
ef4a38f49a80f7c5fa0ddbca971dabecd18f8315b193bbad8536bdc82e8ee8f9601550436495baafaf6a1d3f4203071caecfcb92d1bd2040da7d2f5fb0959016
-
SSDEEP
6144:0SqoMOnMICUuOdZXzkcfEw+dPkJInW0mG1dHlfj4Vi5zhU4a3fgPng5oWqin:vqoMgAOjDk1zOIn5+i5C1PMnDWqI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2653acf8f6c4afa54b438f4668ded1a3.bin
Files
-
2653acf8f6c4afa54b438f4668ded1a3.bin.exe windows:5 windows x86 arch:x86
8db5d49cc1798d20cfd4697c24c19969
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineA
GetProcessHeap
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
QueryPerformanceFrequency
RaiseException
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
SetLastError
HeapSize
ExitProcess
TlsGetValue
setupapi
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
user32
GetWindowTextLengthA
gdi32
GetEnhMetaFileW
EndPage
StartPage
EndDoc
StartDocW
RealizePalette
GetBkColor
Sections
.text Size: 249KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 181KB - Virtual size: 466KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ