RFa5c1
VisibleEntry
20-02-2024 22:17
240220-17tnasfg2y 10Static task
static1
Behavioral task
behavioral1
Sample
loader.bat
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
loader.bat
Resource
win10v2004-20231215-en
Target
fea155f714b3153192dfc11fba84609edf1e78bbb7f1d6979de6a9ab4077099d.zip
Size
1.1MB
MD5
a17888fb730640f078886d28e0a07b1b
SHA1
d321e6f8397edafb895f3ed1b0b775a35e2e541f
SHA256
753a66f032d0d7a7c310a2e5f98c54e95e3d404400224d592657a02079c668d5
SHA512
ac55c4818541cc98ab88a69629c86a29f28ceb92f1061ea0244d36dda54f7376f11527f5fa158a517f466967db90573999f67ec4d62126dc7e2af58870ffe5b1
SSDEEP
24576:2VuUnOP6B3ORRJe0sAWt20yh2oi6sIz+cXzcGa+Lge1/oz1:2oUnOhSA0Ci6sqIB+Lgyoh
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/fea155f714b3153192dfc11fba84609edf1e78bbb7f1d6979de6a9ab4077099d.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
WriteFile
CloseHandle
GetLastError
GetCurrentActCtx
CreateThread
FindFirstFileA
FindNextFileA
GetCurrentProcessId
GetWindowsDirectoryA
GetSystemDirectoryA
GetTempPathA
DeleteFileA
SetEndOfFile
OpenFileMappingA
CreateNamedPipeA
ConnectNamedPipe
DisconnectNamedPipe
VirtualAlloc
RFa5c1
VisibleEntry
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ