Static task
static1
Behavioral task
behavioral1
Sample
001c44a470c39efbc113db71d7e24d20N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
001c44a470c39efbc113db71d7e24d20N.exe
Resource
win10v2004-20240704-en
General
-
Target
001c44a470c39efbc113db71d7e24d20N.exe
-
Size
180KB
-
MD5
001c44a470c39efbc113db71d7e24d20
-
SHA1
f7a3bdc4477776114aa58ed20dfffe793f759343
-
SHA256
d15143fa5e3234aa1e14c47ce85bafaab60d906724fcdc50c8f7a2d1819e765f
-
SHA512
979ca7bb9e58de19970fe1c899e2fbd99f38e47c92940d3e417e65b882edcc18f86828a148810950968526605a940f0295796ec8866463c18b8670b0a6b6f7b8
-
SSDEEP
1536:Fwr4qf6TL/lYd/NU40DYwFTElqJp8tM9QRbWC7OZ3oZb7Pt:iEqI/GJNULDYwFgldMeBn03oZF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 001c44a470c39efbc113db71d7e24d20N.exe
Files
-
001c44a470c39efbc113db71d7e24d20N.exe.exe windows:4 windows x86 arch:x86
0dcb4330e0234374369182562641a54b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
TerminateProcess
GetCurrentProcess
IsBadWritePtr
IsBadReadPtr
HeapValidate
GetCommandLineA
GetVersion
HeapAlloc
DebugBreak
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
GetProcAddress
LoadLibraryA
InterlockedIncrement
GetModuleFileNameA
HeapReAlloc
HeapFree
GetLastError
VirtualFree
VirtualAlloc
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetFilePointer
SetHandleCount
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
SetConsoleCtrlHandler
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
ReadFile
CloseHandle
LCMapStringA
LCMapStringW
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ