Static task
static1
Behavioral task
behavioral1
Sample
14db31bf8824ab0598ef5f5c7740acd0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
14db31bf8824ab0598ef5f5c7740acd0N.exe
Resource
win10v2004-20240802-en
General
-
Target
14db31bf8824ab0598ef5f5c7740acd0N
-
Size
214KB
-
MD5
14db31bf8824ab0598ef5f5c7740acd0
-
SHA1
dc3bbe6309db41f113f007951db6d1bccdfe9771
-
SHA256
44e11b2ac702d4d70b50c3a05879e129040d25e8f8d7fa93e68cbdd02fde962b
-
SHA512
110e26a3c5f5def321d65df6e89783971944963e6d7639b0733f7517f08f075020df46944864b9261a52b72d6819dfcaf6ffa4a6361a43e6a092d7987a0239b6
-
SSDEEP
3072:DWG4Z89vhW8fKBLQ8e2CvOP6ubRzjMc5UK+:4ZQvhWUcQv2qd6lj+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14db31bf8824ab0598ef5f5c7740acd0N
Files
-
14db31bf8824ab0598ef5f5c7740acd0N.exe windows:4 windows x86 arch:x86
ba50b559adedcf438a8df2c76bd1ab98
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
ExitProcess
WriteFile
SetFilePointer
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
GetCommandLineA
GetVersionExA
GetModuleHandleA
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LoadLibraryA
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
VirtualProtect
GetSystemInfo
SetStdHandle
GetLocaleInfoW
FlushFileBuffers
GetCurrentThread
GetProcAddress
GetProcessHeap
GetStartupInfoA
CreateFileW
user32
LoadCursorW
LoadCursorA
msvcrt
wcsncpy
_callnewh
_except_handler3
__CxxFrameHandler
advapi32
RegOpenKeyW
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ