Static task
static1
Behavioral task
behavioral1
Sample
436d31e7fd2b360942c00bc0d2384360N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
436d31e7fd2b360942c00bc0d2384360N.exe
Resource
win10v2004-20240709-en
General
-
Target
436d31e7fd2b360942c00bc0d2384360N.exe
-
Size
258KB
-
MD5
436d31e7fd2b360942c00bc0d2384360
-
SHA1
707f00c35cf8acd063331c8a06c182fd64a4d7db
-
SHA256
269d54eaec16c7926502cb5d34b55f2dbc6b208233b7d6fdaa7542d287ce0ed3
-
SHA512
16921a857af6237b9f85eeb2bbe7dc14967a3d0672f59adcbb090d59cf5a1e66e72c5fbfda18f00022b611e72bedbc9fec35f1e621a1aea48595b74d029bb5c1
-
SSDEEP
6144:fVUBbED5nYGUbtM5vYioGDNuQ9zoLHfClZE/g:fV0gX5vYliVsTQq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436d31e7fd2b360942c00bc0d2384360N.exe
Files
-
436d31e7fd2b360942c00bc0d2384360N.exe.exe windows:4 windows x86 arch:x86
8772cedc56e9352d8a96abbbbba6fad2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
GetUrlCacheHeaderData
InternetSetFilePointer
UnlockUrlCacheEntryFileA
DeleteUrlCacheContainerW
InternetTimeFromSystemTimeA
UnlockUrlCacheEntryFile
InternetCreateUrlW
InternetCreateUrlA
InternetDialA
ShowX509EncodedCertificate
GetUrlCacheEntryInfoExW
FtpOpenFileW
InternetReadFile
GopherOpenFileA
InternetCanonicalizeUrlW
CreateUrlCacheContainerW
InternetSetCookieW
HttpSendRequestExW
InternetCheckConnectionA
GetUrlCacheEntryInfoA
gdi32
SetDIBColorTable
EndPath
GetCharacterPlacementA
GetMapMode
ScaleViewportExtEx
GdiGetBatchLimit
GetTextCharsetInfo
GetKerningPairsW
UpdateICMRegKeyA
Escape
StretchBlt
AbortPath
LineDDA
user32
SwapMouseButton
OffsetRect
GetScrollPos
CharNextA
LoadMenuIndirectA
EndTask
FreeDDElParam
GetClipboardViewer
SetActiveWindow
SetMessageExtraInfo
CallMsgFilter
shell32
ShellHookProc
ShellAboutA
FreeIconList
FindExecutableW
InternalExtractIconListA
DragQueryFileAorW
SHGetSpecialFolderLocation
SheGetDirA
SHUpdateRecycleBinIcon
DragQueryPoint
DragFinish
SHQueryRecycleBinA
SHGetFileInfoW
SHEmptyRecycleBinW
RealShellExecuteA
SHFileOperation
SheChangeDirA
SHGetMalloc
SHFileOperationA
ExtractAssociatedIconA
SHInvokePrinterCommandA
CommandLineToArgvW
SHAddToRecentDocs
ShellAboutW
kernel32
GetEnvironmentStringsW
RtlUnwind
InitializeCriticalSection
GetStdHandle
LeaveCriticalSection
GetCurrentProcessId
GetVersionExA
GetLocaleInfoA
HeapSize
GetLocaleInfoW
EnumSystemLocalesA
SetLastError
LCMapStringA
DeleteCriticalSection
GetUserDefaultLCID
HeapCreate
GetStringTypeA
GetOEMCP
FreeEnvironmentStringsW
VirtualQuery
GetLastError
WideCharToMultiByte
ExitProcess
HeapReAlloc
UnhandledExceptionFilter
GetTimeFormatA
GetACP
GetCommandLineA
GetProcAddress
InterlockedExchange
Sleep
SetHandleCount
GetCurrentProcess
GetCurrentThreadId
IsValidCodePage
CompareStringA
VirtualFree
GetTimeZoneInformation
GetProcessHeap
IsValidLocale
SetConsoleCtrlHandler
TlsGetValue
GetStartupInfoA
GetCPInfo
GetModuleFileNameA
TerminateProcess
FreeLibrary
TlsAlloc
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetFileType
VirtualAlloc
HeapDestroy
MultiByteToWideChar
GetTickCount
SetEnvironmentVariableA
GetSystemTimeAsFileTime
LoadLibraryA
EnterCriticalSection
TlsSetValue
InterlockedDecrement
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapAlloc
IsDebuggerPresent
GetStringTypeW
GetModuleHandleA
GetCurrentThread
CompareStringW
GetDateFormatA
CreateWaitableTimerA
HeapFree
WriteFile
TlsFree
LCMapStringW
InterlockedIncrement
Sections
.text Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ