Static task
static1
Behavioral task
behavioral1
Sample
de7eef14b1e0f29ed95a5e55509c1bf0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
de7eef14b1e0f29ed95a5e55509c1bf0N.exe
Resource
win10v2004-20240802-en
General
-
Target
de7eef14b1e0f29ed95a5e55509c1bf0N.exe
-
Size
284KB
-
MD5
de7eef14b1e0f29ed95a5e55509c1bf0
-
SHA1
f4eb5e752de2482eff794324a8267c9e8d7383f2
-
SHA256
c3edfe2f7d35dc1734b8ba81e85ab9f870c1f0f3e1874505f28899d1a7d338d3
-
SHA512
59f26aeb98b8d1062f209119ed73b0f81c4db142e4468224adb4028f11839a16b698e93da16ff2903af55e63ee8baf86910e39ac8b818eb529f1e21f341ad866
-
SSDEEP
6144:IG/JGjQnQTNgl979k4zyPr5tRdzB6hW+SVXRdF+VTqnaPhsesQck:X/AQnQwPE5tRd0h9IIhsOck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de7eef14b1e0f29ed95a5e55509c1bf0N.exe
Files
-
de7eef14b1e0f29ed95a5e55509c1bf0N.exe.exe windows:4 windows x86 arch:x86
4d2efee6f5edd66280cb0c8846157bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetCurrentThread
GetACP
InterlockedExchange
DeleteAtom
GetThreadPriority
GetExpandedNameA
HeapCreate
VirtualProtect
WriteConsoleA
GetModuleHandleA
FlushFileBuffers
GetCurrentProcess
GetTimeFormatA
GetStdHandle
GetEnvironmentStringsA
FormatMessageA
LoadLibraryA
IsDebuggerPresent
GetCurrentProcessId
HeapDestroy
user32
EndPaint
ShowWindow
wsprintfA
GetCursorPos
FillRect
DragDetect
GetDlgItem
GetWindowTextLengthA
GetParent
GetWindow
GetClassNameA
BeginPaint
DrawTextA
SetActiveWindow
GetFocus
ReleaseDC
FrameRect
GetTitleBarInfo
SetForegroundWindow
advapi32
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegEnumKeyA
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ