Static task
static1
Behavioral task
behavioral1
Sample
36db5f280292081aa0ffe7b1adfa4940N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36db5f280292081aa0ffe7b1adfa4940N.exe
Resource
win10v2004-20240709-en
General
-
Target
36db5f280292081aa0ffe7b1adfa4940N.exe
-
Size
1.1MB
-
MD5
36db5f280292081aa0ffe7b1adfa4940
-
SHA1
b413b9ffc65ae9f1304e530e6e30c02095ad5ece
-
SHA256
8e87c6ce5190cd9a000ac68d75f1e208dae1859a84d26158a1efbf28327b88b9
-
SHA512
dafce80c579b9a3ef09181a2e2ae0be9ec66475cf2f8c25c67565f8f2bf134d2e8ee80d8733e8c54ba38a6a606187aef794f2d20b4142fbfd3e42d41ef93bbd9
-
SSDEEP
24576:7GLPjk9b0RqLNeXfhTn3Sd55vRotWn2bqDWb:7stGWSd5n2bEW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36db5f280292081aa0ffe7b1adfa4940N.exe
Files
-
36db5f280292081aa0ffe7b1adfa4940N.exe.exe windows:1 windows x86 arch:x86
aacb23bee08cc1608470486c5df543a7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
MultiByteToWideChar
GetVersionExA
CreateThread
GetSystemInfo
GetLastError
CreateFileA
WriteFile
CloseHandle
CreateProcessA
SetCurrentDirectoryA
CreateDirectoryExA
user32
UpdateWindow
MessageBoxA
LoadImageA
DialogBoxParamA
EndDialog
SetDlgItemTextA
GetDlgItem
SendMessageA
LoadBitmapA
SendDlgItemMessageA
wsprintfA
ShowWindow
EnableWindow
shell32
SHGetFolderLocation
SHGetPathFromIDList
SHBrowseForFolderA
wininet
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetGetLastResponseInfoA
InternetCloseHandle
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteKeyA
RegCloseKey
ole32
CoInitialize
CoUninitialize
CoCreateInstance
gdi32
CreateFontA
Sections
.code Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 227B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.wdata Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 157KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ