Static task
static1
Behavioral task
behavioral1
Sample
4ede7623981aea9d6282f4862ead8680N.exe
Behavioral task
behavioral2
Sample
4ede7623981aea9d6282f4862ead8680N.exe
General
-
Target
4ede7623981aea9d6282f4862ead8680N.exe
-
Size
32KB
-
MD5
4ede7623981aea9d6282f4862ead8680
-
SHA1
52e3ede2c151ba1ea953f3d765b388e601fb8282
-
SHA256
aa343f2b4cc41981b92952a8d63c080d8ef99873f54bda9e4984e66b3b729477
-
SHA512
b1cb65a92b703e28e2ac2faf75a2c2ea6632f8527f6875cb5f9b31f140030d4442f7445d80917eaa340da8e361e1c72a3392c07d5d4cafeca4be7055614468d6
-
SSDEEP
192:GAGqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIa6abHa5tGbFOvh/W:PVR8iQLoFx1jW5sIZR5tGwvdW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ede7623981aea9d6282f4862ead8680N.exe
Files
-
4ede7623981aea9d6282f4862ead8680N.exe.exe windows:5 windows x86 arch:x86
6e422d9571eebc39b9447b608be77f42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
StrStrA
StrChrA
ws2_32
htons
setsockopt
WSAIoctl
recv
WSAGetLastError
closesocket
gethostbyname
send
connect
WSAStartup
socket
gethostname
WSACleanup
wininet
DeleteUrlCacheEntry
advapi32
GetUserNameA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
urlmon
URLOpenBlockingStreamA
kernel32
CreateMutexA
GetModuleFileNameA
CreatePipe
OpenMutexA
CloseHandle
GetLastError
GetVersionExA
CreateDirectoryA
lstrcatA
ReadFile
TerminateProcess
GetTempPathA
lstrcpyA
SetCurrentDirectoryA
WinExec
GetLocalTime
HeapAlloc
CreateProcessA
GetExitCodeProcess
ExitProcess
GetComputerNameA
CreateFileA
GetFileSize
lstrcmpA
lstrlenA
IsProcessorFeaturePresent
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
WriteFile
GetCommandLineA
GlobalAlloc
Sleep
shell32
ShellExecuteA
user32
wsprintfA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ