Static task
static1
Behavioral task
behavioral1
Sample
33e20f7d792c65ca0dc04f207d350fa255ef3f66d06bcafb6148469f491d133c.exe
Resource
win7-20240903-en
General
-
Target
33e20f7d792c65ca0dc04f207d350fa255ef3f66d06bcafb6148469f491d133c.exe
-
Size
60KB
-
MD5
1c10c8d7135d7e25c5cfadbe78fb1481
-
SHA1
4527a1b89f3283d10079807aec4d51c937aa638f
-
SHA256
33e20f7d792c65ca0dc04f207d350fa255ef3f66d06bcafb6148469f491d133c
-
SHA512
95ae6fe3bad2352216db55144b658017d784fa331acb36a81abe8603f7c1023237dbc017f0dcd406d126a9329fdc9cff0824af7233a25caa3d40ea8d4de7fa6d
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxP0:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdaI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 33e20f7d792c65ca0dc04f207d350fa255ef3f66d06bcafb6148469f491d133c.exe
Files
-
33e20f7d792c65ca0dc04f207d350fa255ef3f66d06bcafb6148469f491d133c.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
HSUDHUHW Size: - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSUDHUHW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE