Static task
static1
Behavioral task
behavioral1
Sample
0644a3ee03258846c93a1baffc830680N.dll
Resource
win7-20240708-en
General
-
Target
0644a3ee03258846c93a1baffc830680N.exe
-
Size
120KB
-
MD5
0644a3ee03258846c93a1baffc830680
-
SHA1
f509b7bdb027db32e39bf25817fe4f49a7364221
-
SHA256
edd70beb1af4fb573d53cef616b9d15e0fe1aba3bc1e26016bd16435262d1807
-
SHA512
af9877f520b46b2c34a63d20b853bec6104317e7bff6e4af0105148f476c3007debe04ba308dc4dbbab9ddddd08249b92746065d2cf5b3f13eb5f8c86c7d9398
-
SSDEEP
3072:pmKNZz3IgyLfD6WjflF3/4at32zYWK/V:sK7wxN4YvWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0644a3ee03258846c93a1baffc830680N.exe
Files
-
0644a3ee03258846c93a1baffc830680N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ