Static task
static1
Behavioral task
behavioral1
Sample
d4b82a7f5a6d9e9fd1ba193c1d887550N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
d4b82a7f5a6d9e9fd1ba193c1d887550N.exe
Resource
win10v2004-20240709-en
General
-
Target
d4b82a7f5a6d9e9fd1ba193c1d887550N.exe
-
Size
615KB
-
MD5
d4b82a7f5a6d9e9fd1ba193c1d887550
-
SHA1
61c21e476665eec6324f03e1dfc2e8b28608775a
-
SHA256
ce4cc2d6f3710fe84665a1f3d279b08a9b402227d8eddbc7be25d86e4bc84200
-
SHA512
95e37bc8c2a9049b03b475144f1804c04e0d44e5c4dcb6668c6bb5e15d8b4cd7ca3c7b354564f9eef317fc752e6d0751c98ce655b748d08fe149edcb01a6884e
-
SSDEEP
12288:maJ+4AnOhI83yNMqTznmyD977U4t03yBG3VlTvXTXnnBuAHqd0KFN:mHnnOh93yNlznmuW3llTvXjnDqVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4b82a7f5a6d9e9fd1ba193c1d887550N.exe
Files
-
d4b82a7f5a6d9e9fd1ba193c1d887550N.exe.exe windows:4 windows x86 arch:x86
4e154f900691e2530ccb13f6f64710ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlDestroyProcessParameters
user32
GetCapture
kernel32
GetThreadLocale
Sections
.text Size: 608KB - Virtual size: 608KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE