Static task
static1
Behavioral task
behavioral1
Sample
636f3ae70903b26f87c5887e53991230N.dll
Resource
win7-20240705-en
General
-
Target
636f3ae70903b26f87c5887e53991230N.exe
-
Size
120KB
-
MD5
636f3ae70903b26f87c5887e53991230
-
SHA1
6cb2e172b622247f8fe8c8be91d7221ab72554ca
-
SHA256
be8cd9725b1a9cbc6d01eb70455ce790f615fcb35c8b5e2ab47295317df602e6
-
SHA512
4509f16744caac734b638acdefcf9ec48c3d04ba4be8343557a637cb09d0ee50563923846ab9581d86cca8faba3d826eb22ae98e7f5cf3f57749c0ce1a5a34e3
-
SSDEEP
3072:S3HfU+KZrmJqsne3jMyMn6ia3/vomRCO7:S3/5KZrmJk3j/ia10O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 636f3ae70903b26f87c5887e53991230N.exe
Files
-
636f3ae70903b26f87c5887e53991230N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ