Static task
static1
Behavioral task
behavioral1
Sample
884b367b2811fdff604cc75066263049fae381d14b2bd498e993dd9a07ec20ebN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
884b367b2811fdff604cc75066263049fae381d14b2bd498e993dd9a07ec20ebN.exe
Resource
win10v2004-20240802-en
General
-
Target
884b367b2811fdff604cc75066263049fae381d14b2bd498e993dd9a07ec20ebN
-
Size
342KB
-
MD5
e413ed9eed7c316b18124c120dd59900
-
SHA1
844491000a3b7c08d368cbcd104ac80082e46edb
-
SHA256
884b367b2811fdff604cc75066263049fae381d14b2bd498e993dd9a07ec20eb
-
SHA512
5592725f417800d2764466b1dc8441773908659b27e5ca46634ad5295ed56f5bb0fb061884678f6b5d4df608f69c2dd8f4747b58bb07e86207cd5183f04973db
-
SSDEEP
6144:St5/tALcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/j8/3b2:StgFhgh2R8O+yFqpLh+4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 884b367b2811fdff604cc75066263049fae381d14b2bd498e993dd9a07ec20ebN
Files
-
884b367b2811fdff604cc75066263049fae381d14b2bd498e993dd9a07ec20ebN.exe windows:4 windows x86 arch:x86
816fa65e92598966cbdc508ee65b83e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
IsDebuggerPresent
HeapCreate
LocalFree
GetACP
CreateWaitableTimerA
FindClose
GetModuleHandleA
CreateFileMappingA
lstrlenA
LoadLibraryExA
CreateEventA
GetStdHandle
GlobalUnlock
GlobalLock
IsBadReadPtr
CloseHandle
GetLastError
user32
GetMessageA
GetSubMenu
IsMenu
GetDlgItem
SetFocus
DialogBoxParamA
DispatchMessageA
RedrawWindow
CheckMenuItem
ClipCursor
GetDlgItemTextA
GetParent
EndDialog
DrawIconEx
apphelp
ApphelpShowDialog
ApphelpCheckRunApp
SdbCloseDatabase
SdbFindFirstTag
ApphelpCheckIME
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ