Static task
static1
Behavioral task
behavioral1
Sample
f0d325e13eb8bec604338bd516e053c71a4be9e71b8ec5dc841690ed028f2367N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f0d325e13eb8bec604338bd516e053c71a4be9e71b8ec5dc841690ed028f2367N.exe
Resource
win10v2004-20240802-en
General
-
Target
f0d325e13eb8bec604338bd516e053c71a4be9e71b8ec5dc841690ed028f2367N
-
Size
2.8MB
-
MD5
6e7aaa9a19ea22963e81c9d19f073c00
-
SHA1
1877fac0f1e7ad89d667b2a742edc5f1c8d3286b
-
SHA256
f0d325e13eb8bec604338bd516e053c71a4be9e71b8ec5dc841690ed028f2367
-
SHA512
10526cd433f6499f09a38ba47e9b0aabd36e30f88732a634b3f5afbd1b222cb11b534254245adca1a244cfa0477decc9216e9bbac20976cad25c3f8275f4d692
-
SSDEEP
49152:/VSg7ebB6+HLMhHxeX19BnrJXqu5rec/UEdKVIsByLX+/Hp/09a:Agmghgrqirec/UEgVL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0d325e13eb8bec604338bd516e053c71a4be9e71b8ec5dc841690ed028f2367N
Files
-
f0d325e13eb8bec604338bd516e053c71a4be9e71b8ec5dc841690ed028f2367N.exe windows:4 windows
ca0a90fb9f427479e184a2c2831d0c01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
user32
GetClipboardOwner
GetMessagePos
GetProcessWindowStation
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE