TmIeronrnietotweasj
Static task
static1
Behavioral task
behavioral1
Sample
5a592bc9aee6d9fe1daf988c827cdda0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5a592bc9aee6d9fe1daf988c827cdda0N.dll
Resource
win10v2004-20240802-en
General
-
Target
5a592bc9aee6d9fe1daf988c827cdda0N.exe
-
Size
2.5MB
-
MD5
5a592bc9aee6d9fe1daf988c827cdda0
-
SHA1
40feeca32627e480c663fa88d26f98c12a98f7b6
-
SHA256
c63419f70cb66bcdd800edb2a84eb6d5a94bc09010d48c0fa499dff445fba0f8
-
SHA512
db0d10347ef30e197df8f7db574542de1f5321ceeee50e10a8b378167c6ba257bb5f9d900b690b89a21a2bb6102792ac28a03a849d3b252253b1f9f49676b38e
-
SSDEEP
49152:5zzBKR94Hbs3flUOph7pWMYuD46J4CpWn22pfihn4oVHebD:5etPlP7pWMYyJq22pKHJebD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5a592bc9aee6d9fe1daf988c827cdda0N.exe
Files
-
5a592bc9aee6d9fe1daf988c827cdda0N.exe.dll windows:5 windows x86 arch:x86
65606c51a4afb4e42d493390df65b0f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
ole32
OleLoad
CoRevokeClassObject
rpcrt4
RpcEpRegisterW
imm32
ImmEnumRegisterWordW
gdi32
SetMapMode
SaveDC
FlattenPath
shell32
ShellExecuteW
SHGetDesktopFolder
kernel32
CreateHardLinkW
WritePrivateProfileStructW
TerminateProcess
GetFileAttributesA
GetModuleHandleW
GetStringTypeW
OutputDebugStringA
GetModuleFileNameA
GetProcessVersion
rasapi32
RasGetAutodialAddressA
iphlpapi
GetNumberOfInterfaces
msvfw32
ICInfo
avifil32
AVIFileExit
msvcrt
setlocale
advapi32
GetSecurityDescriptorDacl
user32
BeginDeferWindowPos
ShowWindow
EnableMenuItem
InvertRect
LoadBitmapW
WaitMessage
Exports
Exports
Sections
.text Size: 564KB - Virtual size: 563KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.crt1 Size: 204KB - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 200KB - Virtual size: 201KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BXu Size: 188KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 508KB - Virtual size: 507KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qO1=ZLL Size: 840KB - Virtual size: 837KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ