Static task
static1
Behavioral task
behavioral1
Sample
5d6a5fb1d0d3c79afc9d6fc2e8e375c0N.dll
Resource
win7-20240705-en
General
-
Target
5d6a5fb1d0d3c79afc9d6fc2e8e375c0N.exe
-
Size
120KB
-
MD5
5d6a5fb1d0d3c79afc9d6fc2e8e375c0
-
SHA1
63b780f0c45006fab770c8f055c83f4fa0366667
-
SHA256
8593e270c16e8161b29b65c72e10a9a683cd2c4a474a55a56b9b4ce357140635
-
SHA512
104baf9fa2746154ac147a3f29b27646eceac727487b597f78904ffa9c475104d123abaf8dedb8be0f1d4261150adc30819d47a6af5e5fd59c788955b43e2d9b
-
SSDEEP
3072:NZ/HRO4KaFSsagHQA9XLjJra7ZpOawEWXsYYSeX:NRHE4tFSszHQKLjhamaR2fs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d6a5fb1d0d3c79afc9d6fc2e8e375c0N.exe
Files
-
5d6a5fb1d0d3c79afc9d6fc2e8e375c0N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ