Static task
static1
Behavioral task
behavioral1
Sample
3d40d77ab9eab27154c6f1dee8b64f476c79ddea9f45a2c0a008f9fbc2c7e977.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3d40d77ab9eab27154c6f1dee8b64f476c79ddea9f45a2c0a008f9fbc2c7e977.exe
Resource
win10v2004-20240802-en
General
-
Target
3d40d77ab9eab27154c6f1dee8b64f476c79ddea9f45a2c0a008f9fbc2c7e977
-
Size
11.5MB
-
MD5
1850f6ab6ac4f945b46bac1b69d18fe8
-
SHA1
84b9cc99448876c2fd7b9243e51640c856d7807a
-
SHA256
3d40d77ab9eab27154c6f1dee8b64f476c79ddea9f45a2c0a008f9fbc2c7e977
-
SHA512
40b8aa5c3abb323f73731d9f005e9fcede432db3dc33baae18f3cc077cfdb87bce45c6d81570244d95280d9a52ce34d5e00ccf9bc36035b7770577cd8bd087ab
-
SSDEEP
196608:YMiUDLaFx7Bkbbrr4mV8CZLF+MCCbqRaoNxhUKPpso7CpBzD5BPRYrk1Qr59Y4wU:HLC7+n4oJ+MCYqQomKPpsoWpBZBaY1Ep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d40d77ab9eab27154c6f1dee8b64f476c79ddea9f45a2c0a008f9fbc2c7e977
Files
-
3d40d77ab9eab27154c6f1dee8b64f476c79ddea9f45a2c0a008f9fbc2c7e977.exe windows:6 windows x64 arch:x64
f271cabfc9f987dca3c7b608ea6faf30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
user32
MessageBoxW
advapi32
AdjustTokenPrivileges
shell32
ShellExecuteExW
gdi32
GetStockObject
ws2_32
WSACleanup
secur32
GetUserNameExA
wininet
DeleteUrlCacheEntryW
urlmon
URLDownloadToFileW
shlwapi
StrTrimA
iphlpapi
GetAdaptersInfo
Sections
.text Size: - Virtual size: 5.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 132KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mapo2 Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE