Static task
static1
Behavioral task
behavioral1
Sample
81dab1df56d8f96f1a445d4f2bc062af.exe
Resource
win7-20240705-en
General
-
Target
81dab1df56d8f96f1a445d4f2bc062af.bin
-
Size
417KB
-
MD5
81dab1df56d8f96f1a445d4f2bc062af
-
SHA1
08ffd72cca5f4644d032123c4206f7eea67270cb
-
SHA256
c7bbdf513fd252f0af6a2bded756a705eb11a838e12d40deb28afb526682535c
-
SHA512
ffb1972b8daab0412381f293698bfb997904b20eb67fe7e5ca890b7809294f3ccb226d944b30a6f755f180590846b4ebd233813ef1102553e1636ae1bf6f3008
-
SSDEEP
6144:Fl4YCqLZh14jvgvqh9Q0CUSGTEkARBNDgbq8M9Mxdb9feBc1e:Xh1vqhi0Cy4kARLBak
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81dab1df56d8f96f1a445d4f2bc062af.bin
Files
-
81dab1df56d8f96f1a445d4f2bc062af.bin.exe windows:4 windows x86 arch:x86
dd56dcf7b01143934ede35d680be0dfe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
lstrcpyn
CloseHandle
GlobalCompact
ExitThread
LoadResource
GetCommState
RaiseException
GetProcessHeap
VirtualAlloc
GetOEMCP
GlobalFindAtomA
GlobalFree
GlobalLock
GetStdHandle
DeleteAtom
GlobalAddAtomA
ClearCommBreak
LoadLibraryExA
EnterCriticalSection
GetProfileStringA
user32
RegisterClassA
ValidateRect
CloseWindow
ShowWindow
GetDC
EndPaint
GetFocus
GetForegroundWindow
BeginPaint
GetWindowTextLengthA
DrawEdge
GetParent
GetActiveWindow
IsIconic
ReleaseDC
GetWindow
GetWindowTextA
GetClassNameA
GetClassInfoExA
wsock32
WSACleanup
WSAGetLastError
WSAIsBlocking
WSAAsyncSelect
WSAStartup
duser
GetStdColorF
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ