Static task
static1
Behavioral task
behavioral1
Sample
520a7b02729e71c5ecc7a455e1d45830N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
520a7b02729e71c5ecc7a455e1d45830N.exe
Resource
win10v2004-20240802-en
General
-
Target
520a7b02729e71c5ecc7a455e1d45830N.exe
-
Size
1.2MB
-
MD5
520a7b02729e71c5ecc7a455e1d45830
-
SHA1
8e06682bf96c84e61e4849a402c3a9f778f75199
-
SHA256
7e48e21ee5e86b70930091244a86e3bcc99e66138cebf2f3c5d9d704b9328eae
-
SHA512
88395ea2a09cc9e7eedb94785e9f2d0b32b5f69e4d73102bb4abeb8805aa6ef1dfe8c6acdd40af452ae0739841f2e24e9ef685ec2a70c7ca9791e0fe17350a90
-
SSDEEP
24576:bzhxvY8AfIYSigZ5VaqWnU1+GYTuwKj3j+tbI/3T:PhxvYtfX1gjTPuCwKjjYbIvT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 520a7b02729e71c5ecc7a455e1d45830N.exe
Files
-
520a7b02729e71c5ecc7a455e1d45830N.exe.exe windows:4 windows x86 arch:x86
5a416a6c04f1bdf1bb454fc5a80b53cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
EnumResourceNamesA
CreateDirectoryA
lstrcpynA
Sleep
GetUserDefaultLangID
LockResource
LoadResource
SizeofResource
FindResourceA
FreeLibrary
GetProcAddress
LoadLibraryExA
lstrcmpiA
SetFileAttributesA
lstrcmpA
GetStartupInfoA
ExitProcess
GetCommandLineA
GetModuleHandleA
HeapAlloc
SetCurrentDirectoryA
HeapFree
GetLastError
SetLastError
GetVersionExA
WaitForSingleObject
GetSystemDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
GetDriveTypeA
CreateEventA
ResetEvent
SetEvent
ReleaseMutex
MapViewOfFile
CreateFileMappingA
CreateMutexA
UnmapViewOfFile
WaitForMultipleObjects
RemoveDirectoryA
CreateProcessA
MultiByteToWideChar
lstrlenA
lstrcatA
CreateFileA
lstrlenW
WriteFile
CloseHandle
GetProcessHeap
DeleteFileA
user32
GetKeyboardType
CharNextA
GetClassNameA
SendMessageA
EnumWindows
LoadStringA
wsprintfA
MessageBoxA
advapi32
RegCloseKey
RegOpenKeyExA
RegFlushKey
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryValueExA
ole32
CoInitialize
CoUninitialize
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ