Static task
static1
Behavioral task
behavioral1
Sample
0f0ba6810d0b0f7c74ec7f5568a59d40N.exe
Resource
win7-20240903-en
General
-
Target
0f0ba6810d0b0f7c74ec7f5568a59d40N.exe
-
Size
59KB
-
MD5
0f0ba6810d0b0f7c74ec7f5568a59d40
-
SHA1
268423e43ab419a7c39bf57731e257e9b7459bde
-
SHA256
69a5a94c2b65fac5677f326ccb9b6baf6bdfb689433ac23b8206ce51aee4df25
-
SHA512
1a41f4219f9c327c3b426b501dc083e1e8596d9b6def64ea698b201348b360e05ab7c757f1ec83da6b695821a7348b740b931b1dc3522aa5b3eb628ddba8db42
-
SSDEEP
1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pel5:GVpYPx3S2K3ks3ff3p405
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f0ba6810d0b0f7c74ec7f5568a59d40N.exe
Files
-
0f0ba6810d0b0f7c74ec7f5568a59d40N.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
VGSDHSJK Size: - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VGSDHSJK Size: 54KB - Virtual size: 56KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE