Static task
static1
Behavioral task
behavioral1
Sample
51438203d0c95b59a3ca434a84650e60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
51438203d0c95b59a3ca434a84650e60N.exe
Resource
win10v2004-20240802-en
General
-
Target
51438203d0c95b59a3ca434a84650e60N.exe
-
Size
48KB
-
MD5
51438203d0c95b59a3ca434a84650e60
-
SHA1
18e09d3e843d272b77b7b2420f8098bb16c88694
-
SHA256
07c86d8ad609750c53e2e4d7d289c5c4e2a8c838fcde61a06828711fccc3bf15
-
SHA512
05286879e851153b5876f9a443a7e038c62cfdc06ffbd242e7114492fb04cfb1502f92e7124dc337efb42c9c11b09340f112348885833e7590aea70117ba3f7c
-
SSDEEP
1536:2GUiEAJxZMtdEI2MyzNORQtOflIwoHNM2XBFV7WB7lx7+srwvOJJiq:2GUzKMtdEI2MyzNORQtOflIwoHNM2XB4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51438203d0c95b59a3ca434a84650e60N.exe
Files
-
51438203d0c95b59a3ca434a84650e60N.exe.exe windows:5 windows x86 arch:x86
d49d59a6fd3b08b6c9c9979cf34e9b21
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
FillRect
GetDC
GetWindowRect
SetFocus
kernel32
GetLastError
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FindClose
FindNextFileA
DeleteFileA
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
GetEnvironmentStringsA
gdi32
CreatePen
CreateFontIndirectA
BitBlt
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ