Static task
static1
Behavioral task
behavioral1
Sample
094f1f939853424a5c52c3ade8c21940N.dll
Resource
win7-20240704-en
General
-
Target
094f1f939853424a5c52c3ade8c21940N.exe
-
Size
120KB
-
MD5
094f1f939853424a5c52c3ade8c21940
-
SHA1
7f961cd2c0ef3e65e6fff3032139cc4f3f1b2db5
-
SHA256
2ac01f9316efb7c13b5a78d35ceeaaa3d9d7d3ec9b784fb8eaa5580b1747750c
-
SHA512
463f6f002cdd6ed2c2100a7419396d30220a55e325ed5560bff348ceb2571ec4a4ea36e2d3573596c4096f65904a10da325e96c6253a046b00db1b49d4300c72
-
SSDEEP
3072:vU3z2xDcu8e99hyhjPJaczubkbNKCCYRUX:s+wu99qjUuQyNK/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 094f1f939853424a5c52c3ade8c21940N.exe
Files
-
094f1f939853424a5c52c3ade8c21940N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ