Static task
static1
Behavioral task
behavioral1
Sample
64bfb3f17ab54bcb5866a6c999709dc4eec00425f5158952883e7c447164f532N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64bfb3f17ab54bcb5866a6c999709dc4eec00425f5158952883e7c447164f532N.exe
Resource
win10v2004-20240802-en
General
-
Target
64bfb3f17ab54bcb5866a6c999709dc4eec00425f5158952883e7c447164f532N
-
Size
58KB
-
MD5
014dc0401c60f5d8559cacfc36024b30
-
SHA1
18e7b7825c38d9ca33560378ba644715ef85881e
-
SHA256
64bfb3f17ab54bcb5866a6c999709dc4eec00425f5158952883e7c447164f532
-
SHA512
14bf2113e113b5054b8697229b094c4e36afea2b335fbb410425f71f3132b14b047247d459db3779b9f6072841f076749acbd51529c450b2e1d166183f9a51b1
-
SSDEEP
1536:RETE4IWkkkkkkkkkkkk+RE9hY1moVtpOQtSS9SxZcAXcs0I:2Eqkkkkkkkkkkkk+RE9hJ6mS8mI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64bfb3f17ab54bcb5866a6c999709dc4eec00425f5158952883e7c447164f532N
Files
-
64bfb3f17ab54bcb5866a6c999709dc4eec00425f5158952883e7c447164f532N.exe windows:4 windows x86 arch:x86
aafe9a40777c984b96982ddd780b4c29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
kernel32
VirtualAlloc
GetWindowsDirectoryA
TlsFree
GetDiskFreeSpaceA
CreateFileA
FindClose
_lread
GetACP
TlsFree
TlsFree
DebugBreakProcess
GetConsoleTitleA
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
Beep
SetCommMask
Sections
.text Size: 512B - Virtual size: 462B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE