Static task
static1
Behavioral task
behavioral1
Sample
ac59e3715f8dae42406952e8ec759320N.exe
Resource
win7-20240708-en
General
-
Target
ac59e3715f8dae42406952e8ec759320N.exe
-
Size
59KB
-
MD5
ac59e3715f8dae42406952e8ec759320
-
SHA1
72be58e71f351834893c188f4e88349b50467d89
-
SHA256
9b9fcae8338d9b592efd5542a5f2f94035efc4607e1a862e31950d12acb062f4
-
SHA512
a984432cfe114c588a35f03e3f87ac099a781bd9998cc6c57418c96ffc9af6c12106ac67955d0d8c0c47bb7330ca8747ddad3038c1671a82ece6162d874317d3
-
SSDEEP
1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pel9u:GVpYPx3S2K3ks3ff3p409u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ac59e3715f8dae42406952e8ec759320N.exe
Files
-
ac59e3715f8dae42406952e8ec759320N.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
VGSDHSJK Size: - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VGSDHSJK Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE