Static task
static1
Behavioral task
behavioral1
Sample
d9a75e6f30f7a20c19d2ec774d4fdb00N.exe
Resource
win7-20240903-en
General
-
Target
d9a75e6f30f7a20c19d2ec774d4fdb00N
-
Size
184KB
-
MD5
d9a75e6f30f7a20c19d2ec774d4fdb00
-
SHA1
0179f907a4a89f67576aabcec33d77ccfa0af20a
-
SHA256
7db7d98aa37f952ff0e80be0fea0cd4c7b7180fa819fc5d5a414e987f15c9670
-
SHA512
412c885cdbb626e57c50ec2bafcf8780ccf00341f76f380becda65ab516521015b1a60f1fc45a2ad3c5bd8ad8ab2934e9cfe119f1884ccff7e075c739aae3391
-
SSDEEP
3072:dLXV++lusZRq5xn19fxRnoomT0ZbR/MRayWe52R+4J2g:ZbHq5xLfDoomibRWlYRFJT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9a75e6f30f7a20c19d2ec774d4fdb00N
Files
-
d9a75e6f30f7a20c19d2ec774d4fdb00N.exe windows:4 windows x86 arch:x86
2c3c68a3e98a1ad75ebd3c57d4144301
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualProtect
GetProcAddress
GetModuleHandleA
GetLastError
GetTickCount
GetLocaleInfoA
LoadLibraryA
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
HeapSize
GetStringTypeW
VirtualQuery
VirtualFree
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
HeapReAlloc
GetACP
GetOEMCP
GetCPInfo
RtlUnwind
InterlockedExchange
GetSystemInfo
user32
PostQuitMessage
ShowWindow
GetDC
IsIconic
GetCursorPos
SetCursorPos
GetWindowRect
GetDesktopWindow
msvfw32
DrawDibStop
DrawDibEnd
avifil32
AVIFileInit
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 230KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ