Static task
static1
Behavioral task
behavioral1
Sample
997f9b524199e0ea08270a9882855170N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
997f9b524199e0ea08270a9882855170N.exe
Resource
win10v2004-20240802-en
General
-
Target
997f9b524199e0ea08270a9882855170N.exe
-
Size
381KB
-
MD5
997f9b524199e0ea08270a9882855170
-
SHA1
38ee43e2aad3f7fa707c2aba8cd8a4681401c512
-
SHA256
9b96664c653ceebbb6457a32748b6b5a082c8ead7db0497c2f5458e7890635df
-
SHA512
0eceb79e4d573fa51dcf8edec1b74dcb1b3fec0e269ca2a1488ba827a9d059925f2bd404973213a3c1ff4f612dae98efcbb5d491e2f6cd5cccb745dba097d3f5
-
SSDEEP
3072:CAL2FNMXG7/JRXq2nw1yPZwaxPypZMq6e:PAiGlRaOwgtxPyqe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 997f9b524199e0ea08270a9882855170N.exe
Files
-
997f9b524199e0ea08270a9882855170N.exe.exe windows:4 windows x86 arch:x86
62e3cfe9e2688178e799d8b09710b3c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
FindNextFileA
FindFirstFileA
ReadProcessMemory
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
user32
LoadStringA
RegisterClassExA
LoadCursorA
LoadAcceleratorsA
UpdateWindow
ShowWindow
CreateWindowExA
PostQuitMessage
EndPaint
DrawTextA
GetClientRect
BeginPaint
DialogBoxParamA
DestroyWindow
DefWindowProcA
EndDialog
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CharNextA
LoadIconA
msvcrt
strlen
strcat
strcpy
memcpy
strrchr
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vbnjpaz Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE