Static task
static1
Behavioral task
behavioral1
Sample
c185b54f03f61b906707dc1b2126fe4d190ac830c9c2da17a3e1a6d4557f9d03N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c185b54f03f61b906707dc1b2126fe4d190ac830c9c2da17a3e1a6d4557f9d03N.exe
Resource
win10v2004-20240802-en
General
-
Target
c185b54f03f61b906707dc1b2126fe4d190ac830c9c2da17a3e1a6d4557f9d03N
-
Size
370KB
-
MD5
fa03b35d5c7c536717c2ed16c0a4a130
-
SHA1
b0d14dd7f88da56803e274ce69dec97bdd5849e9
-
SHA256
c185b54f03f61b906707dc1b2126fe4d190ac830c9c2da17a3e1a6d4557f9d03
-
SHA512
0839cff6b3fa29b236e25ec6e00dd263dee241514c086a05e0fa4dafb21d60b6389845cf5d7b8aa76ad8c3f45fb6666648e41210f44b5ada81fc9c093fd96547
-
SSDEEP
6144:UuDeBKecBsNEgXtYtaTexGGRA+VSQl0WgaBmh2Rmg1KBqcAK3q:fDe0zsNEgXtrOGcA+YQl05EX1KBRAK3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c185b54f03f61b906707dc1b2126fe4d190ac830c9c2da17a3e1a6d4557f9d03N
Files
-
c185b54f03f61b906707dc1b2126fe4d190ac830c9c2da17a3e1a6d4557f9d03N.exe windows:4 windows x86 arch:x86
71fd3821eb7133ef1274b12e66ecde01
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
DeleteAtom
lstrlenW
GlobalFree
HeapCreate
VirtualQuery
GetExitCodeProcess
FindResourceA
GetModuleHandleA
SetLastError
GlobalUnlock
GetCurrentThreadId
GetStdHandle
TlsGetValue
GetPriorityClass
SetEnvironmentVariableA
CreateMutexA
CloseHandle
ReleaseMutex
LoadLibraryExW
user32
GetDlgItem
CheckRadioButton
DrawEdge
FillRect
DrawMenuBar
CreateWindowExA
GetIconInfo
DispatchMessageA
CallWindowProcA
SetFocus
IsWindow
GetDC
CreateMenu
ntshrui
IsPathSharedW
SetFolderPermissionsForSharing
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
IsPathSharedA
msasn1
ASN1BERDecEoid
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 343KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ