Static task
static1
Behavioral task
behavioral1
Sample
d957d373d0812f92c244b160539b5c80N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d957d373d0812f92c244b160539b5c80N.dll
Resource
win10v2004-20240802-en
General
-
Target
d957d373d0812f92c244b160539b5c80N.exe
-
Size
100KB
-
MD5
d957d373d0812f92c244b160539b5c80
-
SHA1
cd830d0aa474a3a100f7b88cad78fced72dfc905
-
SHA256
09bf0ebbc5788a3cf82323ef0761506a49357e9efee3679bea6adf9251bf8807
-
SHA512
b1029abc593aad63b4773810d9ea7f2389b86dc1e43548bbe6dab096587cfa8b055e97bf42e268f57df34458dc4ee5437dbb790208af17d1ab237ac11e235c2a
-
SSDEEP
1536:/+6ezLS2fkrdAlTfaIAIkjupc9g/cDEui5VVIYLX9l7OgYXn4aWpYC0:/QS2fkZEzA7j1g/Gi5zThakYC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d957d373d0812f92c244b160539b5c80N.exe
Files
-
d957d373d0812f92c244b160539b5c80N.exe.dll windows:4 windows x86 arch:x86
865562546d56fcaeaa4805af29572b30
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VDMOperationStarted
GetDefaultCommConfigA
SetConsoleCursorInfo
GetBinaryTypeA
GetBinaryTypeA
EnumSystemLocalesA
GetTickCount
SetCriticalSectionSpinCount
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
text Size: 8KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 832B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ