Static task
static1
Behavioral task
behavioral1
Sample
f749d1510810f0fb1c9d7d84dec502e0N.dll
Resource
win7-20240704-en
General
-
Target
f749d1510810f0fb1c9d7d84dec502e0N.exe
-
Size
120KB
-
MD5
f749d1510810f0fb1c9d7d84dec502e0
-
SHA1
1dad1ce5865c4dd4dc170bac08ca8a02cb56b8b6
-
SHA256
d5bd9401b8f2664a6d60a62ff18025112eb2ef788ea9afeeb85cdc2c4a6d35d2
-
SHA512
df6a0fcd756fb9e05faf60f906fd136a628a8261a6a568e1170ea9a807e2a3a3376b65a6f847ab9200db72fe5ed6b8874354fddd861e49da00fe8a26aea487a6
-
SSDEEP
1536:3Izc0QTcICTGV9z3EXfR4rbtBzQFigGGHycVr5zRHB/YdhxkuAXf13mb:TTZEXfyrbtpQieHnxr/YdnkuAXt3k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f749d1510810f0fb1c9d7d84dec502e0N.exe
Files
-
f749d1510810f0fb1c9d7d84dec502e0N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ