Static task
static1
Behavioral task
behavioral1
Sample
3ab1aa2adf37986b99ef0020cb1fc270N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3ab1aa2adf37986b99ef0020cb1fc270N.exe
Resource
win10v2004-20240802-en
General
-
Target
3ab1aa2adf37986b99ef0020cb1fc270N.exe
-
Size
32KB
-
MD5
3ab1aa2adf37986b99ef0020cb1fc270
-
SHA1
92aef164a0fac835750ce37215a3606abb620fd0
-
SHA256
35c82d3992776d2df611b4a5fed90fa3036219cf7a78c6e50cecb905fa0a7c90
-
SHA512
9ab70078b5ddf1e7368d9ee9a1bcac6c1eb12e9d7758aa21077ae0591ad86d087640110679307dbe3fae6e5ccd5f248fe868689d7202eedaadd4f9bf5af72ea4
-
SSDEEP
192:GAGqjRFGKMh9ED/IDExeorm9+Dfp0GjW5sH2t3AIa6abHa5tGbFOvh1:PVR8iQLoFx1jW5sIZR5tGwvD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ab1aa2adf37986b99ef0020cb1fc270N.exe
Files
-
3ab1aa2adf37986b99ef0020cb1fc270N.exe.exe windows:5 windows x86 arch:x86
6e422d9571eebc39b9447b608be77f42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
StrStrA
StrChrA
ws2_32
htons
setsockopt
WSAIoctl
recv
WSAGetLastError
closesocket
gethostbyname
send
connect
WSAStartup
socket
gethostname
WSACleanup
wininet
DeleteUrlCacheEntry
advapi32
GetUserNameA
RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
urlmon
URLOpenBlockingStreamA
kernel32
CreateMutexA
GetModuleFileNameA
CreatePipe
OpenMutexA
CloseHandle
GetLastError
GetVersionExA
CreateDirectoryA
lstrcatA
ReadFile
TerminateProcess
GetTempPathA
lstrcpyA
SetCurrentDirectoryA
WinExec
GetLocalTime
HeapAlloc
CreateProcessA
GetExitCodeProcess
ExitProcess
GetComputerNameA
CreateFileA
GetFileSize
lstrcmpA
lstrlenA
IsProcessorFeaturePresent
HeapFree
WaitForSingleObject
GetTickCount
GetProcessHeap
WriteFile
GetCommandLineA
GlobalAlloc
Sleep
shell32
ShellExecuteA
user32
wsprintfA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ