Static task
static1
Behavioral task
behavioral1
Sample
cac274fbd3d0c71fd4b195ea926e3d70N.dll
Resource
win7-20240903-en
General
-
Target
cac274fbd3d0c71fd4b195ea926e3d70N.exe
-
Size
1.0MB
-
MD5
cac274fbd3d0c71fd4b195ea926e3d70
-
SHA1
73cf2e0415f7d10028bfc3dba5a6e6c629e73abb
-
SHA256
cbc8e5a238e027824b93d0c3b5666e8ad5b537b5d3021895bf420aa8640353b7
-
SHA512
7edb3360d06cb37aa8e4a46abea2ce1a4a3c434fc3b1aa92b3ef0e0a92240ebd69c1e52bd51a53c0162100edd2c1386016345a95158ce0f2ee8205c2cecf443b
-
SSDEEP
12288:dCMptYjC0mpChTsRRJ/eAfqYBj/ymg6kWYE44Qm2WmXQHZAt7zF0RPH+z6dSyN6d:dWjCRCuhZ9PA1z6x+AEW7aUB1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cac274fbd3d0c71fd4b195ea926e3d70N.exe
Files
-
cac274fbd3d0c71fd4b195ea926e3d70N.exe.dll windows:4 windows x86 arch:x86
235bf8e1d415fd98910ec2cf46b1b13b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetProcAddress
GetStartupInfoA
VirtualAlloc
InterlockedExchange
VirtualQuery
GetTickCount
LoadLibraryA
Sleep
SetLastError
IsDebuggerPresent
GetCurrentThreadId
GetProcessHeap
IsBadStringPtrA
IsBadWritePtr
VirtualProtect
user32
GetWindowInfo
GetWindow
GetTitleBarInfo
GetAncestor
CopyIcon
GetCursor
GetWindowContextHelpId
GetWindowRect
GetClientRect
IsCharUpperA
IsWindowVisible
GetWindowPlacement
IsChild
BlockInput
WindowFromDC
GetDC
GetWindowRgn
GetIconInfo
advapi32
IsValidSecurityDescriptor
AreAnyAccessesGranted
InitializeSecurityDescriptor
IsValidSid
msvcrt
_ltoa
srand
rand
ldiv
_adjust_fdiv
malloc
_initterm
free
memchr
_memccpy
_CIpow
_CIcosh
time
ldexp
frexp
_hypot
_pctype
_isctype
__mb_cur_max
__doserrno
div
_itoa
_CIfmod
gdi32
GetPixel
GetBkColor
GetStretchBltMode
ole32
CoGetCurrentProcess
CoRevertToSelf
shell32
ord66
ord680
ord64
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ