Static task
static1
Behavioral task
behavioral1
Sample
036a6c0429686662b564c3723c02cd1f92e10c56d9fb2ac546234cf083255cdcN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
036a6c0429686662b564c3723c02cd1f92e10c56d9fb2ac546234cf083255cdcN.exe
Resource
win10v2004-20241007-en
General
-
Target
036a6c0429686662b564c3723c02cd1f92e10c56d9fb2ac546234cf083255cdcN
-
Size
34KB
-
MD5
4d9ebd81aac718418773d09973b29a30
-
SHA1
1c09d8029d86264e48d54f97e53ae4c5fc94f182
-
SHA256
036a6c0429686662b564c3723c02cd1f92e10c56d9fb2ac546234cf083255cdc
-
SHA512
ec651a8466dcc4a56f2f91be2497b3bf4f95d5b82e79c6d61c41f457728e522d7a5ed3e734098b844d358b9d6d13b21cc91ab3b3e385701473edcd4a0fb72d10
-
SSDEEP
384:Pqc8W5JenQ05X9pZGmvt72B6zS3Gf1qpwPI9vpuR27vvxlLbKKDltl9HrTa:wQ0npvVYYhf1auI9vpe27DbXtlBTa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 036a6c0429686662b564c3723c02cd1f92e10c56d9fb2ac546234cf083255cdcN
Files
-
036a6c0429686662b564c3723c02cd1f92e10c56d9fb2ac546234cf083255cdcN.exe windows:4 windows x86 arch:x86
d3f16d0bb420f1ef31d9a1b904c27976
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
mfc42
ord823
msvcrt
exit
user32
wsprintfA
shell32
ShellExecuteA
shlwapi
SHDeleteKeyA
ws2_32
setsockopt
iphlpapi
GetIfTable
Sections
.MPRESS1 Size: 12KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE