Static task
static1
Behavioral task
behavioral1
Sample
369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9.exe
Resource
win7-20240704-en
General
-
Target
369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9
-
Size
59KB
-
MD5
43b98f2f84c84e705ad1b49cec1af4bf
-
SHA1
537ea069aea32c6330db395bf02bfae1911388e9
-
SHA256
369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9
-
SHA512
9c97e22c116b82237e7bbfe085ed8a4ce7262d4de762740309647b9d8be67ce3e68ee3f01b9aab6d56d39c57aa44b861d9b2432bc875328159d804d069f56638
-
SSDEEP
1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4PelN:GVpYPx3S2K3ks3ff3p40N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9
Files
-
369904248ff3122fd34442fd268b51d47a842068ddc174d3196294236970b4f9.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
VGSDHSJK Size: - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VGSDHSJK Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE