Static task
static1
Behavioral task
behavioral1
Sample
37b5a7666d67d824c77ce2496f281b60N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
37b5a7666d67d824c77ce2496f281b60N.exe
Resource
win10v2004-20240709-en
General
-
Target
37b5a7666d67d824c77ce2496f281b60N.exe
-
Size
91KB
-
MD5
37b5a7666d67d824c77ce2496f281b60
-
SHA1
621de798e299b9dc0a69a3e9e6bc4e5cd4e14b08
-
SHA256
481496a876e265fdd7d7c1f2aabe255612ae6e53838e2de05cca2cf1fd402920
-
SHA512
ed0b197c05ecb1cb7c893bad64eb341c7e7538f87a21e7bc306a47e8f943b4ff9aaa5d8da7d5812675cd05f0e5f05bca4336d9a1deecc0b9cd72602f8249e7ff
-
SSDEEP
1536:XxLjsGAhJ2ZGEpkYHvHCRlRixRAbd+4+06J92TL8OcmexxnNaeuNnOX:+1Pj1lRGxRh9IL8dHoOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37b5a7666d67d824c77ce2496f281b60N.exe
Files
-
37b5a7666d67d824c77ce2496f281b60N.exe.exe windows:4 windows x86 arch:x86
0cd572ea7ca1814f65a58cfb854a9600
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessorSystemCycleTime
ResolveDelayLoadsFromDll
VerLanguageNameA
GetNumaProcessorNodeEx
GetSystemDefaultLCID
CreateThreadpoolIo
TermsrvOpenRegEntry
ActivateActCtx
AddScopedPolicyIDAce
RegUnLoadKeyA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE