Static task
static1
Behavioral task
behavioral1
Sample
f0de3ffc00dffb5fb4b2e31ce4a825f0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f0de3ffc00dffb5fb4b2e31ce4a825f0N.exe
Resource
win10v2004-20240802-en
General
-
Target
f0de3ffc00dffb5fb4b2e31ce4a825f0N.exe
-
Size
327KB
-
MD5
f0de3ffc00dffb5fb4b2e31ce4a825f0
-
SHA1
58da3307c2415b1de99bddc45a338cca529f4909
-
SHA256
27cbdde966592cc25b266621c10916b780c952b34a35b57dc44b74e7adfb1c1b
-
SHA512
cb837c909aefa39251c15ae4ad4bc501418d283f1e31b7d32e165d668866d3c097abf00633018b3a7ecd08a3077cf016e3327c271560ecc8d38743c26639af84
-
SSDEEP
6144:6VB2GA6KjMTR8I9FxLJ9s+SuB6SApzPmTARaRIDWHXO0mvyw0lRU1:6uVdMTRzFlEzpakRWFHXO0eywCS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0de3ffc00dffb5fb4b2e31ce4a825f0N.exe
Files
-
f0de3ffc00dffb5fb4b2e31ce4a825f0N.exe.exe windows:4 windows x86 arch:x86
3209f18d197f500a79afa2007c5c1ebb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFlags
AddAtomA
GetVersion
GetTickCount
TlsFree
GetACP
LoadLibraryW
ExitProcess
VirtualProtect
InterlockedExchange
GetModuleHandleA
GetSystemTime
lstrlenA
GetBinaryTypeA
PulseEvent
SetEvent
CloseHandle
VirtualFree
FindResourceExA
GetLocalTime
FreeConsole
user32
ShowWindow
PostMessageA
UpdateWindow
InsertMenuA
GetSubMenu
LoadIconA
EnableScrollBar
GetDlgItem
TranslateMessage
MessageBoxA
ScrollDC
DrawFrame
DestroyMenu
GetMenuStringA
GetParent
SetWindowPos
GetMenu
GetScrollRange
PostQuitMessage
SetPropA
PrintWindow
EqualRect
DialogBoxParamA
DispatchMessageA
GetKeyboardLayout
InflateRect
ModifyMenuA
GetTitleBarInfo
GetWindowLongA
shlwapi
StrToIntA
StrTrimA
UrlCombineA
UrlHashA
StrToIntExA
version
VerFindFileA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ