Static task
static1
Behavioral task
behavioral1
Sample
31316e961313471c6f7c45b3ece1de60N.dll
Resource
win7-20240704-en
General
-
Target
31316e961313471c6f7c45b3ece1de60N.exe
-
Size
120KB
-
MD5
31316e961313471c6f7c45b3ece1de60
-
SHA1
f3544993ef59baead76e310984a68b8ac061c403
-
SHA256
fbd31022acbfc502ffc83e42db5deb4352ab31452fc77b4845f0202459e95d20
-
SHA512
ed4c4115afd89db6ba99379430dcf35b011e13c94670cc73a423b52bb1878d442f8ba8be245481e417f313098e5aec7e530aae99e7944c3af679f42aebf3c4f8
-
SSDEEP
1536:ej0jTnAO7ajJPM1Mh/QjFpphA4A0crTD9y2t8E+VhNtnjYc4okp5hH8mJk0A7j:hXAO7aji1Mh/SFp+0cr82tRczMxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31316e961313471c6f7c45b3ece1de60N.exe
Files
-
31316e961313471c6f7c45b3ece1de60N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ