Static task
static1
Behavioral task
behavioral1
Sample
0330970ca33b5b0d80e6ac151befc97de78a52135a2e08a907b2a1cd701869ff.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0330970ca33b5b0d80e6ac151befc97de78a52135a2e08a907b2a1cd701869ff.exe
Resource
win10v2004-20240709-en
General
-
Target
0330970ca33b5b0d80e6ac151befc97de78a52135a2e08a907b2a1cd701869ff.exe
-
Size
151KB
-
MD5
49a7722ea3d588753a6f90f9a094b84b
-
SHA1
d21bf72dcbc6fd58ed9c11baf119d13df2322273
-
SHA256
0330970ca33b5b0d80e6ac151befc97de78a52135a2e08a907b2a1cd701869ff
-
SHA512
9fa4510620b8ad3e167f1b13723d43ca5535433f2d07e430dd5a0f6514ce2f7da9422c352929f45f0b35b1767c446b949dfb15b0aa61572766322a639c2e8c6a
-
SSDEEP
3072:RDuXGSqulL9lKT0ePKfQWQJZ3nIQdVENFEX3TCmFyJW:s0ulL9Q40K8JZ3IQdZD7kJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0330970ca33b5b0d80e6ac151befc97de78a52135a2e08a907b2a1cd701869ff.exe
Files
-
0330970ca33b5b0d80e6ac151befc97de78a52135a2e08a907b2a1cd701869ff.exe.exe windows:6 windows x64 arch:x64
0d2c1bd59011bde94da10856671eb87f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
rstrtmgr
RmEndSession
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-private-l1-1-0
__C_specific_handler
api-ms-win-crt-runtime-l1-1-0
_set_app_type
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
strlen
kernel32
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-environment-l1-1-0
__p__wenviron
api-ms-win-crt-time-l1-1-0
_tzset
Sections
.text Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.buildid Size: - Virtual size: 53B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
/4 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/18 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/30 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/42 Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/53 Size: - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/67 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ