Static task
static1
Behavioral task
behavioral1
Sample
2fb11eee472578d07afb34260c2584f0N.dll
Resource
win7-20240705-en
General
-
Target
2fb11eee472578d07afb34260c2584f0N.exe
-
Size
120KB
-
MD5
2fb11eee472578d07afb34260c2584f0
-
SHA1
3c14f6ea299a7c22db5421689df4b961b2170910
-
SHA256
d13f2478468bb34780e4d06e0c8f9bcfc6f99a7d9a25480ea68830d09732c0d8
-
SHA512
451f651053099a789290a9d5f8e6ebd721a3158d93171df61a22b9bf48a2926a65e8449b015a939380d9638ff67f7b83955ff21ef722e8c76bbee35a0d8f33a1
-
SSDEEP
1536:faHfAIFXJbFdqUcJXR/X+sujUY7GxsfD6FJxjpMgIjmI8JLlqpLQWDJEAtPnnkd1:iHhZJb7IRvo376s+OJStSLlK8nnyY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2fb11eee472578d07afb34260c2584f0N.exe
Files
-
2fb11eee472578d07afb34260c2584f0N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ