Static task
static1
Behavioral task
behavioral1
Sample
ea9fc82a8e9f6a12d560abd29ce254f0N.dll
Resource
win7-20240903-en
General
-
Target
ea9fc82a8e9f6a12d560abd29ce254f0N.exe
-
Size
120KB
-
MD5
ea9fc82a8e9f6a12d560abd29ce254f0
-
SHA1
460369833910f1e9c57bb23f7143f4175c5a3367
-
SHA256
b05f557767f39cab362f088c7544a50475a9c4900889da75791a0f9bbf5eb430
-
SHA512
9a4f10c5087268cf98413d63c2a529507682fb51a47a955ecd3bf164137b8bc9d6c3c129720809912bf520403039f229363cfca10f09d4b0ad54e2cf76ca9db6
-
SSDEEP
3072:Hq3rcWdKuU90PBdBXOroxc4Ls1oLMtkEb0i:KQWUyXBXOelfAtkU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ea9fc82a8e9f6a12d560abd29ce254f0N.exe
Files
-
ea9fc82a8e9f6a12d560abd29ce254f0N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ