Static task
static1
Behavioral task
behavioral1
Sample
d8d3f8ebe2ca26c13579c90260cde110N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d8d3f8ebe2ca26c13579c90260cde110N.exe
Resource
win10v2004-20240802-en
General
-
Target
d8d3f8ebe2ca26c13579c90260cde110N.exe
-
Size
448KB
-
MD5
d8d3f8ebe2ca26c13579c90260cde110
-
SHA1
66aef61669f3fb307b145a290941f52e220d7e22
-
SHA256
74ea9b621670e1f8dad84de19ed75731088a5e31ba4df4373faf20911bf548b0
-
SHA512
e28bb118412f0c4ba09227807812aef57d904dd0206f7873124d9accf98b7fd5e3cd11ba2315a28a2bdd8c63e1fe56c8ea15ee780e04fddce73d230cd09c8bd6
-
SSDEEP
6144:tPz9m3hrza21O7S1aAi9JOm06Z9KyBOU+01LN2+TN0wJgqqOIbG5efUp8vFeGo9/:RM6cOm1aA5QZFBOpVObOG8foC2AI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d8d3f8ebe2ca26c13579c90260cde110N.exe
Files
-
d8d3f8ebe2ca26c13579c90260cde110N.exe.exe windows:4 windows x86 arch:x86
c70b712ef099e44049198e88f0dcfabc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlDosPathNameToNtPathName_U
advapi32
ImpersonateNamedPipeClient
kernel32
GetSystemDefaultLCID
GetVersion
user32
GetFocus
Sections
.text Size: 441KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 261B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE