Static task
static1
Behavioral task
behavioral1
Sample
61b38600d1279cabff152d7d141edec5e66062a4f97b9cd554ff8e1747e6dd55N.dll
Resource
win7-20240903-en
General
-
Target
61b38600d1279cabff152d7d141edec5e66062a4f97b9cd554ff8e1747e6dd55N.exe
-
Size
120KB
-
MD5
2048a0ed5a0d87c1c1d38007c5210180
-
SHA1
64ab54a72cb6ffe9e97e9bee383d0edb5c37226a
-
SHA256
61b38600d1279cabff152d7d141edec5e66062a4f97b9cd554ff8e1747e6dd55
-
SHA512
7468476ca48afd9ea83716e2d59f300b1be603e18189d0e6dc85684c4f717b1c9af7ea8dc4ead154628d6a83c723b3ecac2c4b7740365a4b27739ae04818031b
-
SSDEEP
3072:P42ao3wFkT8GxzR/wwbCZXsQkYdFcVAb:PN3wGT8Q97CdeAb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61b38600d1279cabff152d7d141edec5e66062a4f97b9cd554ff8e1747e6dd55N.exe
Files
-
61b38600d1279cabff152d7d141edec5e66062a4f97b9cd554ff8e1747e6dd55N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ