Static task
static1
Behavioral task
behavioral1
Sample
31db91600b959e50e4a2170a6a3fe9be6ff8bc54d4f6c83cca25cb422e80c7b1N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
31db91600b959e50e4a2170a6a3fe9be6ff8bc54d4f6c83cca25cb422e80c7b1N.exe
Resource
win10v2004-20240802-en
General
-
Target
31db91600b959e50e4a2170a6a3fe9be6ff8bc54d4f6c83cca25cb422e80c7b1N.exe
-
Size
1.9MB
-
MD5
9e1c0b20a174e74fed32cbc4f0ba3250
-
SHA1
47be16ac36cb3391225fa7d57cbc0a701892c1f0
-
SHA256
31db91600b959e50e4a2170a6a3fe9be6ff8bc54d4f6c83cca25cb422e80c7b1
-
SHA512
b8bd0ee94eb111242de996c47edc214c9fd93636a93b8736a56fdbf0975386b3ad2d5d825d002a788f91fadf7eefab9a698f31de621458322e631dc96be428ef
-
SSDEEP
49152:As16GyQYJoJVugz5t1LdVr/2kUx9XDWfWt9pe:eQT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31db91600b959e50e4a2170a6a3fe9be6ff8bc54d4f6c83cca25cb422e80c7b1N.exe
Files
-
31db91600b959e50e4a2170a6a3fe9be6ff8bc54d4f6c83cca25cb422e80c7b1N.exe.exe windows:4 windows
90dbefba72d0d2edfa006195f0137231
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
user32
GetInputState
GetDesktopWindow
Sections
.text Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE