Static task
static1
Behavioral task
behavioral1
Sample
0f638dd0267d185f20ce40132381ea63eb4a1f9e580ad78129e6c79c054d3f86N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f638dd0267d185f20ce40132381ea63eb4a1f9e580ad78129e6c79c054d3f86N.exe
Resource
win10v2004-20240802-en
General
-
Target
0f638dd0267d185f20ce40132381ea63eb4a1f9e580ad78129e6c79c054d3f86N
-
Size
1.1MB
-
MD5
fd7fbea0183a651ce92f77798e7f1690
-
SHA1
c968a90d631cc0bef56bd9c9da577b96840bf182
-
SHA256
0f638dd0267d185f20ce40132381ea63eb4a1f9e580ad78129e6c79c054d3f86
-
SHA512
00fbeea1ba43553f43be7812c51552cb4c6ab2dae883db42b62e9cfcd1b4cadfb97ae246dfc75b6d7dc6429de593a749bc5f86c5d69540e00c5ad17c352dbe08
-
SSDEEP
24576:1+UAqg3B8YcuOwi77Zp6nWxZHgIeMp20JtTETSgTMsdfj2rG81I6sajjHgDZDRlK:1+9quOwi7qnWxZHgIeMw83sajjADZDRE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f638dd0267d185f20ce40132381ea63eb4a1f9e580ad78129e6c79c054d3f86N
Files
-
0f638dd0267d185f20ce40132381ea63eb4a1f9e580ad78129e6c79c054d3f86N.exe windows:4 windows x86 arch:x86
deb82cc024c128a3bc2e3f40abef1ce5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
winmm
timeBeginPeriod
kernel32
VirtualAlloc
VirtualFree
CloseHandle
CreateEventA
CreateThread
CreateWaitableTimerA
DuplicateHandle
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcAddress
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
LoadLibraryW
ResumeThread
SetConsoleCtrlHandler
SetEvent
SetThreadPriority
SetWaitableTimer
Sleep
SuspendThread
WaitForSingleObject
WriteFile
Sections
.text Size: 850KB - Virtual size: 849KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 204B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/18 Size: 59KB - Virtual size: 58KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/30 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/43 Size: 138KB - Virtual size: 137KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 46KB - Virtual size: 46KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/71 Size: 9KB - Virtual size: 8KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/87 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/102 Size: 512B - Virtual size: 91B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 660B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.symtab Size: 512B - Virtual size: 193B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ