Static task
static1
Behavioral task
behavioral1
Sample
9a369deef834e5fb06b03c29dce6bd70N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
9a369deef834e5fb06b03c29dce6bd70N.exe
Resource
win10v2004-20240709-en
General
-
Target
9a369deef834e5fb06b03c29dce6bd70N.exe
-
Size
42KB
-
MD5
9a369deef834e5fb06b03c29dce6bd70
-
SHA1
a976ed2a1f25bdf38ea93995f0026753fed690c3
-
SHA256
4ef2a415f239c72f33a78aa4ca829c6e074f00e17872967947418e30b3a4df14
-
SHA512
8cb918130d8baf4df083263e71195003c15dd327cae671151281f982c3fe3440448c66f7ca30cd2f129782df7b6d375471fca1f8de1bb0794424ff97a0a263af
-
SSDEEP
768:dYGtdtFR6M13vfdHldhwyEr+OGa0aEYS1y9YaPQy:GIUM13vfdHldhwt+OGa01oiaPQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9a369deef834e5fb06b03c29dce6bd70N.exe
Files
-
9a369deef834e5fb06b03c29dce6bd70N.exe.exe windows:4 windows x86 arch:x86
651c3f15c13ce5e90a7fca6b951f3dd5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockResource
SizeofResource
VerLanguageNameW
LoadResource
VirtualAlloc
VirtualFree
lstrlenW
GetModuleHandleA
GetCommandLineA
FindResourceA
VerifyVersionInfoA
ExitProcess
user32
EndPaint
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
LoadMenuA
PostQuitMessage
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
DefWindowProcA
CreateWindowExA
BeginPaint
RegisterClassExA
DispatchMessageA
gdi32
CreateCompatibleDC
DeleteDC
SelectObject
BitBlt
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 910B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ