Static task
static1
Behavioral task
behavioral1
Sample
afea77201f91197519e8943c5eb4f4d33ad3f45224f301457929ec7d5f077a27N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
afea77201f91197519e8943c5eb4f4d33ad3f45224f301457929ec7d5f077a27N.exe
Resource
win10v2004-20240802-en
General
-
Target
afea77201f91197519e8943c5eb4f4d33ad3f45224f301457929ec7d5f077a27N.exe
-
Size
68KB
-
MD5
ec1cd4a94b0c9b69edea2c865abc3360
-
SHA1
3e87a92f2d0cad8936e40db83a61a91279d76533
-
SHA256
afea77201f91197519e8943c5eb4f4d33ad3f45224f301457929ec7d5f077a27
-
SHA512
f9fff2882559a9e2dc15edad1ea2deadcbaccc2efdb6a8629200143bf510d51d38487de27a044401c417ab0d261c277dfc2057ab006c2ee964e8bf3d35ce1d86
-
SSDEEP
1536:PK+YdvHwR2Lg8BXdfbupkWtNIgZZ5qnTyu2ho6A0d:PxYdIR2FdCCSN1IGu2hoS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource afea77201f91197519e8943c5eb4f4d33ad3f45224f301457929ec7d5f077a27N.exe
Files
-
afea77201f91197519e8943c5eb4f4d33ad3f45224f301457929ec7d5f077a27N.exe.exe windows:4 windows x86 arch:x86
342e9dbaf86e88f4cdc1cff3f8d9fb99
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
OemToCharBuffA
MessageBoxA
MessageBeep
LoadCursorFromFileA
LoadCursorA
EndPaint
EndDialog
EmptyClipboard
DrawTextA
DestroyCursor
CreateIconFromResourceEx
CreateDesktopA
CopyRect
CharToOemBuffA
CharNextA
ActivateKeyboardLayout
kernel32
lstrcmpiA
ReadFile
MapViewOfFile
InitializeCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
GetStartupInfoA
GetModuleHandleA
ExitProcess
EnumResourceTypesA
EnumResourceLanguagesA
CloseHandle
advapi32
RegQueryValueA
RegOpenKeyExA
RegCloseKey
Sections
.text Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 37KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ