Static task
static1
Behavioral task
behavioral1
Sample
3270426f2c387c8ef180cfee78e45860N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3270426f2c387c8ef180cfee78e45860N.exe
Resource
win10v2004-20240709-en
General
-
Target
3270426f2c387c8ef180cfee78e45860N.exe
-
Size
164KB
-
MD5
3270426f2c387c8ef180cfee78e45860
-
SHA1
9f5b33bf830eb2255ea7140f4278a345a1e187ea
-
SHA256
004bad91f13254e07f59e12f647d7f13b70585c8b2c7197352ead985bd27b2c8
-
SHA512
9893353678d3449e12d5dbff6169e8eff6b3ce605750c89bd918dea0ccbad0b22454e5d146a7c1f1037891201767a00bb150e5f11851e5038f79c664824bef30
-
SSDEEP
3072:UN2OuvWW2yqw2ox6Gb11IpXyfsgxiWkTGpw+8CY/2p:RW3yDlb6CNXkTGpwP/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3270426f2c387c8ef180cfee78e45860N.exe
Files
-
3270426f2c387c8ef180cfee78e45860N.exe.exe windows:4 windows x86 arch:x86
b6ccc27108651917aad5a9dc2b880e4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
SetFilePointer
ReadFile
GetFileSize
CloseHandle
CreateFileA
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
GetStdHandle
GetLastError
SetEndOfFile
SetConsoleCursorInfo
GetConsoleCursorInfo
Sleep
CopyFileA
FindClose
FindNextFileA
FindFirstFileA
GetCPInfo
GetFullPathNameA
HeapAlloc
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
HeapFree
GetFileAttributesA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
ExitProcess
TerminateProcess
GetCurrentProcess
GetCommandLineA
WriteFile
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetACP
GetOEMCP
WideCharToMultiByte
GetFileType
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetProcAddress
GetModuleHandleA
UnhandledExceptionFilter
GetModuleFileNameA
GetStringTypeA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
RtlUnwind
GetStringTypeW
LoadLibraryA
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA
wsock32
WSAStartup
gethostname
gethostbyname
WSACleanup
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE