Static task
static1
Behavioral task
behavioral1
Sample
410fa1daf6c94804e533e571c2633eded050c95b28d2d1283f39d5abfd8a7e78.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
410fa1daf6c94804e533e571c2633eded050c95b28d2d1283f39d5abfd8a7e78.exe
Resource
win10v2004-20240802-en
General
-
Target
410fa1daf6c94804e533e571c2633eded050c95b28d2d1283f39d5abfd8a7e78
-
Size
27KB
-
MD5
ca78d9352ea2e7b3341d9c1f4bdd5f96
-
SHA1
b3128e388add258d2d8f6c33487426fb5593715e
-
SHA256
410fa1daf6c94804e533e571c2633eded050c95b28d2d1283f39d5abfd8a7e78
-
SHA512
f2d04a0512b98276e2552f1a9bc27f670197838d774e86d641d1811b475944a806e7ef52e29e140e681c7784c8f37b450a34d6220782f0003059510995cd6668
-
SSDEEP
384:dassVW5Wc6UWe1DLUYkAbEWpdU7Kp1WfKiojP/H2RFE5MXFPOMjULCbQKuN:+t01D3vp1qUjP/H2RFLPxU+btc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 410fa1daf6c94804e533e571c2633eded050c95b28d2d1283f39d5abfd8a7e78
Files
-
410fa1daf6c94804e533e571c2633eded050c95b28d2d1283f39d5abfd8a7e78.exe windows:5 windows x86 arch:x86
5d260a2f142b175a2c50b5d2b1b7df4d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegSetValueExW
kernel32
ExitProcess
GetLastError
FreeLibrary
GetCommandLineW
GetProcAddress
LoadLibraryW
WritePrivateProfileStringW
ExpandEnvironmentStringsW
user32
wsprintfW
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE