Static task
static1
Behavioral task
behavioral1
Sample
3e2cf85f403e1e72b8558ae72a0b6b6887adabb6a50f01cc4211201356566c53N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
3e2cf85f403e1e72b8558ae72a0b6b6887adabb6a50f01cc4211201356566c53N.exe
Resource
win10v2004-20241007-en
General
-
Target
3e2cf85f403e1e72b8558ae72a0b6b6887adabb6a50f01cc4211201356566c53N
-
Size
12KB
-
MD5
350f2c681fadff663d3e982ed9df39f0
-
SHA1
7f3554a1d62187f27f86c17b83a8faf2e0d1f4fa
-
SHA256
3e2cf85f403e1e72b8558ae72a0b6b6887adabb6a50f01cc4211201356566c53
-
SHA512
313794c264d290c38c2e5b2eddee6a6365fa399ce424b886f51e668a7418475505472c5d0f645d09b26d505d162322cf26de8a0debc8d317a99fdf6ff5e34c1f
-
SSDEEP
384:6K+dKfzQHxFxRmyja4QhiP7UlY/pjKhYsKUAylUmWmr:v+dAURFxna4QAPQlYghxKUAyl9Wmr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 3e2cf85f403e1e72b8558ae72a0b6b6887adabb6a50f01cc4211201356566c53N
Files
-
3e2cf85f403e1e72b8558ae72a0b6b6887adabb6a50f01cc4211201356566c53N.exe windows:4 windows x86 arch:x86
cc40fefa3af5cd00cc28dbd874038a4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileW
DeleteFileW
ExitProcess
GetComputerNameW
GetCurrentDirectoryW
GetFileSize
GetModuleFileNameW
GetTempPathW
GetVersionExW
ReadFile
WriteFile
lstrlenW
lstrcmpW
SleepEx
VirtualAlloc
wininet
HttpOpenRequestW
HttpSendRequestW
InternetOpenW
InternetConnectW
InternetCloseHandle
InternetReadFile
shell32
ShellExecuteW
ntdll
RtlDecompressBuffer
swprintf
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ