Static task
static1
Behavioral task
behavioral1
Sample
3177e2be8f9b33839eaf901078ced0b389c1bcb635c0e8b7bb3c21a900a75b35.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3177e2be8f9b33839eaf901078ced0b389c1bcb635c0e8b7bb3c21a900a75b35.exe
Resource
win10v2004-20240802-en
General
-
Target
3177e2be8f9b33839eaf901078ced0b389c1bcb635c0e8b7bb3c21a900a75b35
-
Size
856KB
-
MD5
a9572f6c8ceeb4e8dbb8bac9c92aa7e2
-
SHA1
3b79b1eee0003bc76e70bd23fb06efc6e94b5cf2
-
SHA256
3177e2be8f9b33839eaf901078ced0b389c1bcb635c0e8b7bb3c21a900a75b35
-
SHA512
b4d9ec209b80dcc2e17c70a4484805c813723dc3afd3a0b4d43fdf6cb0d072ade65f2b2b7c9100769ed1d7c729f9caa4aacd787d2a697c6ffb62798af9cf9a9e
-
SSDEEP
24576:KJEAT/2fbKzQwlSbjF6ubmCKjAh7pQAG1MO7xJQ/x:K16fBb5tdSAFCB1RrI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3177e2be8f9b33839eaf901078ced0b389c1bcb635c0e8b7bb3c21a900a75b35
Files
-
3177e2be8f9b33839eaf901078ced0b389c1bcb635c0e8b7bb3c21a900a75b35.exe windows:4 windows x86 arch:x86
3a8897c84eb41f36b4bbabcc617408b8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
user32
GetWindow
advapi32
RegDeleteKeyA
shell32
SHGetFolderPathW
Sections
.text Size: 64KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ