D:\_Top\downloadfile\Release\downloadfile.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a959715080ad5253bc2855c2d193657adc51bdcd54a3a634dc853b67940ce4d8.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a959715080ad5253bc2855c2d193657adc51bdcd54a3a634dc853b67940ce4d8.exe
Resource
win10v2004-20240802-en
General
-
Target
a959715080ad5253bc2855c2d193657adc51bdcd54a3a634dc853b67940ce4d8.exe
-
Size
7KB
-
MD5
55bd0d0b211347a264728d50391ef2df
-
SHA1
c1e121e00952af625176235ed1eb4a1b37f8e96e
-
SHA256
a959715080ad5253bc2855c2d193657adc51bdcd54a3a634dc853b67940ce4d8
-
SHA512
1f10fc892fa3239b018caca6b234c24e1b598b3222259e7e372b89aab796b0b49fb1635819be01a37f83dc85946437dfc179e3621cef8355538cf321a83fef85
-
SSDEEP
96:1LcjhiMqAKTcd4K7DNe0vOALtvALtU0dY5SzruVABG68cDCtC1R9z:ShO1NKw0vOsvsUMY5SzruVQG68caCHR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a959715080ad5253bc2855c2d193657adc51bdcd54a3a634dc853b67940ce4d8.exe
Files
-
a959715080ad5253bc2855c2d193657adc51bdcd54a3a634dc853b67940ce4d8.exe.exe windows:5 windows x86 arch:x86
bd77f965336408a4f000de6ec9513f28
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
msvcr100
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__initenv
_crt_debugger_hook
memset
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
fclose
fwrite
fopen
getchar
printf
__set_app_type
?terminate@@YAXXZ
kernel32
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 450B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ