Static task
static1
Behavioral task
behavioral1
Sample
d3016bf6d185c59c280c21e96f6d4ca0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d3016bf6d185c59c280c21e96f6d4ca0N.exe
Resource
win10v2004-20240802-en
General
-
Target
d3016bf6d185c59c280c21e96f6d4ca0N
-
Size
164KB
-
MD5
d3016bf6d185c59c280c21e96f6d4ca0
-
SHA1
803007aba0697bbe03d20dc64780f003303cbb6e
-
SHA256
b7d6b977d2418d301a8629170c252e07c3a7504e9cce88c85eb8109e1175edec
-
SHA512
d14770e82daa1b8e48a1daa42820dde564017d9ec86e33a3eaaf130b95dbd346834e497996a9a3ea7eb376ca83c07a4e01c78d7d8135c9a2eff8d381fc3693c3
-
SSDEEP
3072:kaCTF3HlUJ3VFBRVj0L5C7angE/+cN3qWeK4M+YDOCtkRH4pCwIQN8pDYb1WLY:sTF3HlUJ3VFja182N/pQWepPYjLrN828
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3016bf6d185c59c280c21e96f6d4ca0N
Files
-
d3016bf6d185c59c280c21e96f6d4ca0N.exe windows:4 windows x86 arch:x86
bdfa540e7ef64125e88108b73bd99887
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wininet
FtpPutFileA
mfc42
ord4133
msvcrt
__p__commode
user32
GetDlgItemInt
gdi32
BitBlt
comdlg32
GetOpenFileNameA
advapi32
RegOpenKeyA
shell32
Shell_NotifyIconA
comctl32
ImageList_Remove
ole32
CoUninitialize
oleaut32
SysStringLen
urlmon
URLDownloadToFileA
wsock32
send
msvcp60
??0_Lockit@std@@QAE@XZ
rpcrt4
UuidCreate
Sections
.text Size: 149KB - Virtual size: 424KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE