Static task
static1
Behavioral task
behavioral1
Sample
d532667b9d2b2e0188bd04fb2deade60N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d532667b9d2b2e0188bd04fb2deade60N.exe
Resource
win10v2004-20240802-en
General
-
Target
d532667b9d2b2e0188bd04fb2deade60N
-
Size
238KB
-
MD5
d532667b9d2b2e0188bd04fb2deade60
-
SHA1
2bfaeca1ad5d0bf438a1c6dfa85d7b2f4fc2a99b
-
SHA256
95f600895681920550c293e96ab10e401b0e4ad70a28fcc35a756a76059aa3ee
-
SHA512
9ca6893492c97f95d44f4bef9bb485ee40050212b4084390f8946ad5b6477fa70592fc1df48600769318ff9a7c4eace1638987653adcc88d866b19dd21c1fd63
-
SSDEEP
6144:gX48nunPuGRppmMxomdvtf17FLYnzOy0FHChI7U:V8ipQM/dvtxOnCLChIQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d532667b9d2b2e0188bd04fb2deade60N
Files
-
d532667b9d2b2e0188bd04fb2deade60N.exe windows:4 windows x86 arch:x86
3aeb87703c9662f0ea5d8f45da543746
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
IsDBCSLeadByte
FreeLibrary
VirtualAlloc
lstrcatA
TlsAlloc
GetDriveTypeW
GetLogicalDrives
TlsGetValue
GetACP
TlsFree
GetCurrentThreadId
GetModuleFileNameA
lstrcmpA
GetSystemDefaultLangID
GetCurrentThread
GetCommandLineA
GetCurrentProcess
GetModuleHandleW
TlsSetValue
GetSystemDefaultLCID
user32
GetClassLongA
UpdateWindow
GetWindowTextA
GetDC
CreateWindowExA
GetFocus
IsIconic
GetWindow
BeginPaint
GetSystemMetrics
IsWindowVisible
RegisterClassA
GetActiveWindow
ReleaseDC
ShowWindow
GetWindowDC
GetForegroundWindow
GetWindowLongA
GetWindowTextLengthA
gdi32
GetStockObject
SetBkMode
DeleteObject
SetTextColor
GetObjectA
SelectObject
uxtheme
EnableTheming
DrawThemeIcon
DrawThemeText
GetCurrentThemeName
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 604KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 231KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ