Static task
static1
Behavioral task
behavioral1
Sample
0a76f9c9e44d3d5a3f1e283dc334a320N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
0a76f9c9e44d3d5a3f1e283dc334a320N.exe
Resource
win10v2004-20240709-en
General
-
Target
0a76f9c9e44d3d5a3f1e283dc334a320N.exe
-
Size
725KB
-
MD5
0a76f9c9e44d3d5a3f1e283dc334a320
-
SHA1
ae6dc0562f66434a6db8fd936b51c36531c7378e
-
SHA256
d9460bef7ee53ef08cdfd8a45e01b7913a07fee7c2ae9d87d46d2fb4b914f02f
-
SHA512
b84da827ae0d75665406d7e4a625d567fb1813b891b6225737787b03c02885d0886d11724ee2d032170a34b92deba94ba62401ad9836fed728326041f2499dd5
-
SSDEEP
12288:lM+wSnCwWLMkskJtA8Ilr3xRZjkSCwWLMVLXwKKoqbsrw2/wX:lN05LRskvIlB1C5LqwKKoozX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a76f9c9e44d3d5a3f1e283dc334a320N.exe
Files
-
0a76f9c9e44d3d5a3f1e283dc334a320N.exe.exe windows:4 windows x86 arch:x86
c825d892ec1994311831ac7bb64ddf1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
WSAGetLastError
recv
socket
connect
send
closesocket
kernel32
Sleep
LoadLibraryA
GetProcAddress
TerminateThread
lstrlenA
MultiByteToWideChar
ExitProcess
oleaut32
SysAllocStringLen
SysFreeString
Sections
.text Size: 64KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE