Static task
static1
Behavioral task
behavioral1
Sample
74700e68d334175023bc92f728a15bd0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
74700e68d334175023bc92f728a15bd0N.exe
Resource
win10v2004-20240802-en
General
-
Target
74700e68d334175023bc92f728a15bd0N.exe
-
Size
8.8MB
-
MD5
74700e68d334175023bc92f728a15bd0
-
SHA1
a459183e03af1e5979c92961790dfd02493c62e6
-
SHA256
cd6fbb1c6048495f636a8885ec92c478c28c1f061a03a6a0d592d6f2c16f9847
-
SHA512
04897ce3e61c4ca8e608d9d02a4a8cc452f329cca613cbea67b25351e37567bfe7dd240a72acd3b3cb932e39813d3419140ccdccb9fa06ad7fc1ed59b9180fd9
-
SSDEEP
196608:N1kLjlDNzS7l+cLMv9u84tt0sdCd7JIosWG/lZGUk/ftBqhQICz:bqxVSp+cL+9Qtt0sds7Jr3TqhQF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74700e68d334175023bc92f728a15bd0N.exe
Files
-
74700e68d334175023bc92f728a15bd0N.exe.exe windows:5 windows x86 arch:x86
743ed696ef27f883aa9216e109ba0335
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
urlmon
URLDownloadToFileA
wpcap
pcap_sendqueue_destroy
wininet
HttpOpenRequestA
winhttp
WinHttpReceiveResponse
kernel32
GetVersionExA
GetVersion
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxA
advapi32
RegisterEventSourceA
ole32
OleRun
shell32
ShellExecuteA
oleaut32
VariantClear
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
dbghelp
MiniDumpWriteDump
Sections
.text Size: - Virtual size: 787KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
My0 Size: - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
My1 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
My2 Size: 8.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ