Compliance
Static task
static1
Behavioral task
behavioral1
Sample
895f9833902be9925f2e0383f7b89350N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
895f9833902be9925f2e0383f7b89350N.dll
Resource
win10v2004-20240802-en
General
-
Target
895f9833902be9925f2e0383f7b89350N.exe
-
Size
179KB
-
MD5
895f9833902be9925f2e0383f7b89350
-
SHA1
9c21d38be0cf7bdf06cc13db849787381f32dc8b
-
SHA256
049194e20754742474c65fb621f6104c967c621e69a6e4aebc313bdc884c4664
-
SHA512
707209a33d9463dedd8a28d3cad21efa0446085e1168268fbfca6bd9e064fe029c17844f108d28d9c8822b3d926a2a7c7c4b8b46a4410bb552fecee8e04f75c8
-
SSDEEP
3072:EC5Wpfs98nVCWdKycHtld8VBt7NUalwXH9RqYzJabTYd3KIdj6+uFdi98pvO0hfC:ECOfQ8nVcycHrd8VBtBUa4HfRzJabT83
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 895f9833902be9925f2e0383f7b89350N.exe
Files
-
895f9833902be9925f2e0383f7b89350N.exe.dll windows:4 windows x86 arch:x86
28afa3e869e6149039d25c05abfd3e22
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
mfc42
ord825
msvcrt
rand
user32
GetDesktopWindow
advapi32
QueryServiceStatus
ws2_32
inet_addr
shlwapi
PathIsDirectoryA
ntdll
NtQueryInformationFile
psapi
GetModuleFileNameExA
ole32
CoInitializeSecurity
oleaut32
SafeArrayGetVartype
msvcp60
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
netapi32
Netbios
Exports
Exports
Sections
.text Size: 173KB - Virtual size: 300KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pkls Size: 512B - Virtual size: 520B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE