Static task
static1
Behavioral task
behavioral1
Sample
59df9f6f1fcf7b5c7ee6ed0d1d694330N.dll
Resource
win7-20240708-en
General
-
Target
59df9f6f1fcf7b5c7ee6ed0d1d694330N.exe
-
Size
120KB
-
MD5
59df9f6f1fcf7b5c7ee6ed0d1d694330
-
SHA1
c6b5fef993ba38a8af94058f5d036f024efd4c68
-
SHA256
7400d7a1414a062582fb671cbab89395f61ff0e5967339db58d66b8802117391
-
SHA512
1974a6fef4bc5d01ce3f2f5eaab749d7db2e380059c3986f7ed01670e998d3e83ccd560baf01b0fe14e556cbc03a3b56a2c3432dec4c8eee8381e24e6fcb4b03
-
SSDEEP
3072:ANCZvAslBvDhJf2OU8s9piSJNx3wCyRczUGmAE6:KMvAszDDbbIMtOU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 59df9f6f1fcf7b5c7ee6ed0d1d694330N.exe
Files
-
59df9f6f1fcf7b5c7ee6ed0d1d694330N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ