Static task
static1
Behavioral task
behavioral1
Sample
300173e4b67a9714c5f0a44b378b33ec5e62ffde5ff53082495347a52c302819N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
300173e4b67a9714c5f0a44b378b33ec5e62ffde5ff53082495347a52c302819N.exe
Resource
win10v2004-20240802-en
General
-
Target
300173e4b67a9714c5f0a44b378b33ec5e62ffde5ff53082495347a52c302819N
-
Size
155KB
-
MD5
ab0100a145151e9222bc32635e20cb10
-
SHA1
4a2fbcb8c5222d104d686353702b35faef54713c
-
SHA256
300173e4b67a9714c5f0a44b378b33ec5e62ffde5ff53082495347a52c302819
-
SHA512
48eb9c5ebe4f5b6c63b2cf80948679e0c7af6a1c8ef8cf9616d922112ffbc3784163627885a91175a8e18e8598939ae5669b53482a4a3b6be2051e599499c139
-
SSDEEP
3072:AKmLDwJKIuWwjA4yVcxdA5G2niO1P9HfgvSVigE6a:TmLDCKIuXjA4yauloPgE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 300173e4b67a9714c5f0a44b378b33ec5e62ffde5ff53082495347a52c302819N
Files
-
300173e4b67a9714c5f0a44b378b33ec5e62ffde5ff53082495347a52c302819N.exe windows:6 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 50KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE