Static task
static1
Behavioral task
behavioral1
Sample
1001d722891e890ff9f18ca7cabfc2a0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
1001d722891e890ff9f18ca7cabfc2a0N.exe
Resource
win10v2004-20240709-en
General
-
Target
1001d722891e890ff9f18ca7cabfc2a0N.exe
-
Size
101KB
-
MD5
1001d722891e890ff9f18ca7cabfc2a0
-
SHA1
0d158e187d4263c192339f9736a386ba30156ae1
-
SHA256
382360b026209f440ae3a70c0f803eb0104a977f0e589ee30346b88d722cd69e
-
SHA512
db884895b83c8573ed4cba8dddb69192dac735fc9a8a4597ae7db74db9c7df15fa003c5499da990efb43f6ebfc753567f267e0c0914e76509eecac0ce2369400
-
SSDEEP
3072:eOpqh24QQkkh2zyAdb3ogzJ52GHeXDC/dY79Js:eOpIDh2zFdDogzn29DCK/s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1001d722891e890ff9f18ca7cabfc2a0N.exe
Files
-
1001d722891e890ff9f18ca7cabfc2a0N.exe.exe windows:4 windows x86 arch:x86
b341606d389a578a0657eabb8f470cd3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
CloseHandle
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetFileTime
CreateFileA
SetFileAttributesA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
FindClose
GetLastError
FileTimeToSystemTime
FindFirstFileA
DeleteFileA
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetFilePointer
GetFileType
ReadFile
WriteFile
CreateDirectoryA
GetCurrentDirectoryA
GetModuleHandleA
GetStartupInfoA
GetDriveTypeA
GetFileAttributesA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
GetFullPathNameA
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
SetStdHandle
SetHandleCount
GetStdHandle
SetEndOfFile
GetStringTypeA
GetStringTypeW
GetProcAddress
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
CompareStringA
CompareStringW
SetEnvironmentVariableA
FlushFileBuffers
LoadLibraryA
HeapReAlloc
GetCommandLineA
VirtualAlloc
user32
PeekMessageA
SendDlgItemMessageA
EnableMenuItem
GetSystemMenu
DestroyWindow
CreateDialogParamA
DispatchMessageA
comctl32
ord17
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ