Static task
static1
Behavioral task
behavioral1
Sample
223c226ce7f69a71df91cfbad8e93700N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
223c226ce7f69a71df91cfbad8e93700N.exe
Resource
win10v2004-20240709-en
General
-
Target
223c226ce7f69a71df91cfbad8e93700N.exe
-
Size
58KB
-
MD5
223c226ce7f69a71df91cfbad8e93700
-
SHA1
b341e4199f5c4dd5b60bd6fa564f0409d3447426
-
SHA256
1a0ad26a941e5bf53290bc23bcd3087eacadd31efe9214ad3c521edda6c9d04f
-
SHA512
ca291e39692b5476dd1e1faf4524d74f5c06b56e92cbdaee9766fd070813ad33be25c13a84b654bbee3f7c3844856c1a6b4fbe951bfbd60b2dcf904fb1026af2
-
SSDEEP
768:agwpLIesy68Q3+dotaqCKLeDMy4EOJBscJkK7nXAMwu1h7cvwt3tkOsgryAA5:OpFsCdKfCKL5oOJ9zwM11h76gpsgrS5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 223c226ce7f69a71df91cfbad8e93700N.exe
Files
-
223c226ce7f69a71df91cfbad8e93700N.exe.exe windows:4 windows x86 arch:x86
448ef1c8e9ce431fe6a5e292793559fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
RegisterClassExA
LoadCursorA
UpdateWindow
SendMessageA
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
ShowWindow
SetWindowTextA
kernel32
GetModuleHandleA
LoadLibraryA
GetCommandLineA
lstrcpyA
GetStartupInfoA
comctl32
ord17
msvcrt
_XcptFilter
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_exit
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 532B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ