Static task
static1
Behavioral task
behavioral1
Sample
d920e3cf7d6767c0131763f109ef78ebb08a3c87e936e054f78aa194be81413f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d920e3cf7d6767c0131763f109ef78ebb08a3c87e936e054f78aa194be81413f.exe
Resource
win10v2004-20231215-en
General
-
Target
d920e3cf7d6767c0131763f109ef78ebb08a3c87e936e054f78aa194be81413f
-
Size
66KB
-
MD5
975e502c504349760c657da9d375edfa
-
SHA1
20e259dccc30c3d32ee717303ed7fb658c88583a
-
SHA256
d920e3cf7d6767c0131763f109ef78ebb08a3c87e936e054f78aa194be81413f
-
SHA512
e7558fb653508bd87fe90a1f35e48cb5888a1670f5036a627e800b04b164b23924d59456a54c342ab0015542bf1643992abd8195ee69436b4e1e86e2b63e7fe7
-
SSDEEP
1536:qcpSxMelXcHH121SNTSEvHjhTGrY26xtg1FwnuiLS7v4:94Gel8SEvDhTGrPogAnunA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d920e3cf7d6767c0131763f109ef78ebb08a3c87e936e054f78aa194be81413f
Files
-
d920e3cf7d6767c0131763f109ef78ebb08a3c87e936e054f78aa194be81413f.exe windows:4 windows x86 arch:x86
546be80fb8e793f1b0bbe45464341ccd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
NlsGetCacheUpdateCount
FindNextFileNameW
FatalAppExitA
WerSetFlags
WaitNamedPipeA
PssWalkMarkerRewind
AdjustCalendarDate
SetDefaultDllDirectories
GetNamedPipeClientProcessId
GlobalAddAtomW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE