Static task
static1
Behavioral task
behavioral1
Sample
508a72405fab3dde10bbb90cdf062b90N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
508a72405fab3dde10bbb90cdf062b90N.exe
Resource
win10v2004-20240730-en
General
-
Target
508a72405fab3dde10bbb90cdf062b90N.exe
-
Size
238KB
-
MD5
508a72405fab3dde10bbb90cdf062b90
-
SHA1
8e058e4f00aa1a35ced0628edebdcf40e6dfdda3
-
SHA256
fe6e5cb6ccb9c146304cb56af2ff01222718f531ece446d79b8e7a37a563aef8
-
SHA512
504a39d083f1d440a493eefbd0b99c2d9a253cdabe6aca9809ae00ea2911b045889fa57571bbb805872c849ed122f465943ea1200af1ded269379880e252cb23
-
SSDEEP
3072:mzFg+1dZFDi9bnzFAfMvhg9o9PIaGoTGfTUa5IG2L8qXJhg6eDNOJb7Q49nCidtl:mzF/1dZavFPvhg9haTGBOXQMb7D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 508a72405fab3dde10bbb90cdf062b90N.exe
Files
-
508a72405fab3dde10bbb90cdf062b90N.exe.exe windows:4 windows x86 arch:x86
d9dbdbfd7812a5c5fc8f7e609764dda7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetStringTypeA
GetSystemInfo
LCMapStringA
GetProcAddress
GetTimeFormatA
HeapReAlloc
LeaveCriticalSection
HeapValidate
GetEnvironmentStringsW
GetCurrentProcessId
SetEnvironmentVariableA
GlobalGetAtomNameW
EnumSystemLocalesA
SetHandleCount
UnhandledExceptionFilter
GetTimeZoneInformation
GetFileType
TlsAlloc
VirtualFree
GetACP
TlsGetValue
CommConfigDialogA
GetOEMCP
GetVersionExA
EnumSystemLocalesW
GetDateFormatA
GetShortPathNameA
GetConsoleTitleW
ExitProcess
GetTickCount
CreateDirectoryW
MultiByteToWideChar
HeapFree
SetLastError
GetModuleFileNameA
GetLocaleInfoW
LoadLibraryA
QueryPerformanceCounter
FindFirstFileExA
VirtualAlloc
GetCurrentDirectoryA
LockFile
TlsSetValue
GetCurrentProcess
TerminateProcess
GetCurrentThreadId
WriteFile
CompareStringA
FreeEnvironmentStringsA
GetCommandLineA
IsBadWritePtr
TlsFree
GetStringTypeW
lstrcpynW
GetSystemTimeAsFileTime
CompareStringW
SetConsoleCP
SetComputerNameW
EnterCriticalSection
FreeEnvironmentStringsW
ConvertDefaultLocale
IsValidLocale
HeapCreate
WideCharToMultiByte
GetProfileStringW
GetCPInfo
IsValidCodePage
ReadConsoleInputA
GetStdHandle
LCMapStringW
GetCurrentThread
GetProfileSectionW
InterlockedExchange
GetLastError
VirtualProtect
GetCommandLineW
HeapDestroy
GetStringTypeExW
VirtualAllocEx
GetUserDefaultLCID
GetStartupInfoW
HeapAlloc
InitializeCriticalSection
DeleteFileA
DeleteCriticalSection
GetStartupInfoA
VirtualQuery
GetModuleHandleA
HeapSize
GetEnvironmentStrings
GetModuleFileNameW
RtlUnwind
gdi32
SetDIBColorTable
GetTextMetricsW
CreateHalftonePalette
PatBlt
DeleteDC
GetRandomRgn
GetArcDirection
GetTextAlign
TextOutA
CreateColorSpaceW
TextOutW
PolyBezier
CreateDiscardableBitmap
EnumFontsW
SetTextJustification
LineTo
CreateFontIndirectW
MaskBlt
GetMetaFileA
EnumObjects
DeleteEnhMetaFile
CreatePolygonRgn
ResetDCA
CreateScalableFontResourceA
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ