Static task
static1
Behavioral task
behavioral1
Sample
250e8108ef79a27a40963983d17e0a5e3b801c99ace54f887daef0f0bc7bec54N.exe
Resource
win7-20240903-en
General
-
Target
250e8108ef79a27a40963983d17e0a5e3b801c99ace54f887daef0f0bc7bec54N
-
Size
124KB
-
MD5
443edbca22044d85ddb8a10e6094db70
-
SHA1
76f8ba90a2609b6842ae592d944128c72754ac88
-
SHA256
250e8108ef79a27a40963983d17e0a5e3b801c99ace54f887daef0f0bc7bec54
-
SHA512
b1be75b62fd086bfb605f2388ba3ef5391507b29b95623843ec95135147bc0d38abd07760625aa670f0b04eee45d94adca7160187c632685bc4a61a620039838
-
SSDEEP
3072:oC1QWo4b1dMPhLwy69LgSexlbyYSytQRt:Kmb1ePhLwyV3yeQRt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 250e8108ef79a27a40963983d17e0a5e3b801c99ace54f887daef0f0bc7bec54N
Files
-
250e8108ef79a27a40963983d17e0a5e3b801c99ace54f887daef0f0bc7bec54N.exe windows:4 windows x86 arch:x86
64b514e9d5aef784a408fa58f98eec8e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
kernel32
VirtualFree
SetFilePointer
LoadLibraryA
GetProcAddress
GetStringTypeW
GetVersionExA
CreateFileA
lstrcatA
lstrcpyA
GetLastError
CloseHandle
DeviceIoControl
ReadFile
WriteFile
Sleep
GetLocalTime
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetFileSize
GetModuleFileNameA
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
SetStdHandle
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
FlushFileBuffers
GetStringTypeA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE