Static task
static1
Behavioral task
behavioral1
Sample
87c9d51bb4701ecc6349d040a2c19f40N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
87c9d51bb4701ecc6349d040a2c19f40N.exe
Resource
win10v2004-20240709-en
General
-
Target
87c9d51bb4701ecc6349d040a2c19f40N.exe
-
Size
2.7MB
-
MD5
87c9d51bb4701ecc6349d040a2c19f40
-
SHA1
1dfd92507d5b125e1d04bc343bfd31df9901f04f
-
SHA256
9e9bd604bb2f6953aedbcb5d4201fb804eb612e46e3c86fa5c0bcd3032389e13
-
SHA512
f21304007bdc679f57710cc90a740fcfed47f0bc8c31b837437cc098b4823a74d3fede2ddaf5ed903a750f4b522e0f782b31e5ef085a32b06a7cd9bc4ec89423
-
SSDEEP
49152:j7OR5PJhUwzBqwnYiUc+pLQUz1NH/qJesRxkcU7l15zAtEzKU1p:jyg8rKpLQwZ/ieukcUR15zAmBr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 87c9d51bb4701ecc6349d040a2c19f40N.exe
Files
-
87c9d51bb4701ecc6349d040a2c19f40N.exe.exe windows:4 windows x86 arch:x86
2800a7903712536d2fa82538dab74c57
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamStop
ws2_32
ntohl
kernel32
GetVersion
user32
LoadStringA
gdi32
CreatePen
winspool.drv
OpenPrinterA
comdlg32
GetFileTitleA
advapi32
CryptAcquireContextA
shell32
DragAcceptFiles
ole32
CLSIDFromProgID
oleaut32
SafeArrayGetDim
comctl32
ord17
wininet
FindFirstUrlCacheEntryA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 1.7MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 992KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ