service
Static task
static1
Behavioral task
behavioral1
Sample
a7552015305bb421927bd7a8fff250d0N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7552015305bb421927bd7a8fff250d0N.dll
Resource
win10v2004-20240704-en
General
-
Target
a7552015305bb421927bd7a8fff250d0N.exe
-
Size
48KB
-
MD5
a7552015305bb421927bd7a8fff250d0
-
SHA1
a486eecfb6aeb9d514c90b1c6dc662cf42a9cd93
-
SHA256
f1b8ec985acccfaa4ced536c68b0bd6fe47c4a35af11654978d0d34284a97d9d
-
SHA512
7cabdedf1b21070440bee66e4b838192f9d91312d7dc05be6801fbd320a896ee6bb5e8cc95020b70c314d159cc49ff766250e01d106569798715b1eca23f7f08
-
SSDEEP
768:7DsBlaFvvtk3Dx+4x/CuSDHo91VAPiDDMko:v6p844jooiPM7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7552015305bb421927bd7a8fff250d0N.exe
Files
-
a7552015305bb421927bd7a8fff250d0N.exe.dll windows:4 windows x86 arch:x86
a42e1e0597efbd267205c7886cc4e29f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcrt
_CxxThrowException
__CxxFrameHandler
wcscmp
strstr
strrchr
fopen
time
isdigit
strchr
isspace
??1type_info@@UAE@XZ
urlmon
URLDownloadToFileA
shlwapi
PathFileExistsA
SHSetValueA
SHGetValueA
wininet
InternetCheckConnectionA
InternetCrackUrlA
InternetSetOptionA
kernel32
MultiByteToWideChar
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
GetProcessHeap
HeapAlloc
GetCurrentThreadId
GetCurrentProcessId
GetEnvironmentVariableA
MoveFileA
CreateProcessA
lstrlenA
lstrlenW
WideCharToMultiByte
RtlUnwind
Sleep
DisableThreadLibraryCalls
GetModuleFileNameA
GetTickCount
CreateThread
CloseHandle
ReadFile
SetFilePointer
GetFileSize
CreateFileA
user32
wvsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
ole32
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
Exports
Exports
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE