Static task
static1
Behavioral task
behavioral1
Sample
4e92dbc78c6e70ff4e9bede12a8612e0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4e92dbc78c6e70ff4e9bede12a8612e0N.exe
Resource
win10v2004-20240802-en
General
-
Target
4e92dbc78c6e70ff4e9bede12a8612e0N.exe
-
Size
7.1MB
-
MD5
4e92dbc78c6e70ff4e9bede12a8612e0
-
SHA1
3dbdbcbc3f128c0b7c709349167a94af6e82f709
-
SHA256
fed088885681b3eb50f78c2ac288f829251469a8e0db09fa9718087cbe46a01f
-
SHA512
8257a3724f0a77d9f1dfc7c33837dc035e6169ae7d2de0c8e40e0e9bcfcaac1b414cf2625351bc891d0036603fa8140062baa8ceddaa2c6262c6c0a30a33de45
-
SSDEEP
98304:uUb0pD6Foy0q17CadgFeAiiu1/FtT9FAeKGZLogUPwILGZ5D3VUTAVnaGKvuD:uUb0kB2aaStT4eHZsgLICjSIK2D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e92dbc78c6e70ff4e9bede12a8612e0N.exe
Files
-
4e92dbc78c6e70ff4e9bede12a8612e0N.exe.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 28KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�7'��50� Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rnuanphc Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vlouxvsm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE