Static task
static1
Behavioral task
behavioral1
Sample
733daf76da6afeb0667254280192066cedb7998d39622c3c631b6497b3bddfda.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
733daf76da6afeb0667254280192066cedb7998d39622c3c631b6497b3bddfda.exe
Resource
win10v2004-20241007-en
General
-
Target
733daf76da6afeb0667254280192066cedb7998d39622c3c631b6497b3bddfda.exe
-
Size
119KB
-
MD5
b89a47f25412452c5f1ba20833a5ab97
-
SHA1
cb9c010f4732db01db3e5a808767b805f34592b9
-
SHA256
733daf76da6afeb0667254280192066cedb7998d39622c3c631b6497b3bddfda
-
SHA512
3b234d179abe4b1b8d23ceff7d037893122b0f0efb9b2a39498e1eccd3be93a923db2800b82e20f6f439c0c2b776925af247e944d41d1a79907305895d1e9d63
-
SSDEEP
3072:qMgKFIsviXhl3oOqKG37lyRKfXBx0iQkYIKbCujQd:qMgKF9vixhgKO4Ru8iQj7q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 733daf76da6afeb0667254280192066cedb7998d39622c3c631b6497b3bddfda.exe
Files
-
733daf76da6afeb0667254280192066cedb7998d39622c3c631b6497b3bddfda.exe.exe windows:4 windows x86 arch:x86
511e656b26b990ce011fb26e57a5fc7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPriorityClass
GetProcessHeap
VirtualQueryEx
lstrlenW
CreatePipe
GetFileAttributesW
GetStartupInfoA
DeleteFileA
GetModuleHandleA
CopyFileA
WriteConsoleW
GetCommandLineA
DisconnectNamedPipe
HeapDestroy
GetStdHandle
ResumeThread
WriteConsoleW
lstrcpyA
WriteConsoleW
VirtualProtect
SetEvent
mmcndmgr
DllCanUnloadNow
DllRegisterServer
DllGetClassObject
DllRegisterServer
cryptui
CryptUIWizImport
DllRegisterServer
CryptUIDlgViewContext
CryptUIStartCertMgr
DllUnregisterServer
LocalEnrollNoDS
LocalEnroll
CryptUIWizBuildCTL
LocalEnroll
WizardFree
CryptUIWizExport
CryptUIWizDigitalSign
WizardFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.impdata Size: 1024B - Virtual size: 769B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ