Static task
static1
Behavioral task
behavioral1
Sample
76a06687a9ea56f049134d03060b079cf5ed7da6fe33df88b603b0f19298ddb4N.exe
Resource
win7-20240903-en
General
-
Target
76a06687a9ea56f049134d03060b079cf5ed7da6fe33df88b603b0f19298ddb4N
-
Size
132KB
-
MD5
7644d75199348d49cbd9767118269b50
-
SHA1
e3a20acca25938fdcc375db20731ea797b137d63
-
SHA256
76a06687a9ea56f049134d03060b079cf5ed7da6fe33df88b603b0f19298ddb4
-
SHA512
194cb0f9159db9f865568d82c3448f3da95bf670f472f5d3bfa8d3e51c47e2662363880ae1aa348580eb99bd2815697a76f623bcba70acce9dc236f364ec6fa3
-
SSDEEP
3072:Qs4rey0tvt3GBQ13hoLee8IepvumeKYpVW2993nJDEsWNM:nbxGBKaee4vzcYq9pqNM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 76a06687a9ea56f049134d03060b079cf5ed7da6fe33df88b603b0f19298ddb4N
Files
-
76a06687a9ea56f049134d03060b079cf5ed7da6fe33df88b603b0f19298ddb4N.exe windows:4 windows x86 arch:x86
433f73cce90e542c3efaf3f668b65b90
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
CreateProcessA
lstrcmpA
lstrcatA
lstrcpyA
CreateDirectoryA
lstrlenA
DeleteFileA
GetTempFileNameA
GetTempPathA
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
WriteFile
InitializeCriticalSection
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
CloseHandle
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
VirtualFree
RtlUnwind
VirtualAlloc
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
ole32
CoInitialize
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE