Static task
static1
Behavioral task
behavioral1
Sample
a88c437bfe94f5cfbdee8b67a1fec8ece88019d2576435034beb0594e292cf92.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a88c437bfe94f5cfbdee8b67a1fec8ece88019d2576435034beb0594e292cf92.exe
Resource
win10v2004-20240704-en
General
-
Target
a88c437bfe94f5cfbdee8b67a1fec8ece88019d2576435034beb0594e292cf92
-
Size
16KB
-
MD5
872f6ef3ebd5e1fd64f8c8687d65a5bd
-
SHA1
f5e6df1dc5bd1c3c93c457f98a9e98d33468b305
-
SHA256
a88c437bfe94f5cfbdee8b67a1fec8ece88019d2576435034beb0594e292cf92
-
SHA512
8fccbe4334ad8cd35444a5bda0c8aedaad64fcff2f4d96e22c46f4cfdda3c9d26beda6370d614d82a1acf787c4d3459083a37bc95a4b4562a4e9c68e047be9dd
-
SSDEEP
192:GQOqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIjvYabHa5tGrY:vdR8iQLoFx1jW5sIjvYR5tGE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a88c437bfe94f5cfbdee8b67a1fec8ece88019d2576435034beb0594e292cf92
Files
-
a88c437bfe94f5cfbdee8b67a1fec8ece88019d2576435034beb0594e292cf92.exe windows:5 windows x86 arch:x86
6e422d9571eebc39b9447b608be77f42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
StrStrA
StrChrA
ws2_32
htons
setsockopt
WSAIoctl
recv
WSAGetLastError
closesocket
gethostbyname
send
connect
WSAStartup
socket
gethostname
WSACleanup
wininet
DeleteUrlCacheEntry
advapi32
GetUserNameA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
urlmon
URLOpenBlockingStreamA
kernel32
CreateMutexA
GetModuleFileNameA
CreatePipe
OpenMutexA
CloseHandle
GetLastError
GetVersionExA
CreateDirectoryA
lstrcatA
ReadFile
TerminateProcess
GetTempPathA
lstrcpyA
SetCurrentDirectoryA
WinExec
GetLocalTime
HeapAlloc
CreateProcessA
GetExitCodeProcess
ExitProcess
GetComputerNameA
CreateFileA
GetFileSize
lstrcmpA
lstrlenA
IsProcessorFeaturePresent
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
WriteFile
GetCommandLineA
GlobalAlloc
Sleep
shell32
ShellExecuteA
user32
wsprintfA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ