Static task
static1
Behavioral task
behavioral1
Sample
1d9db973f7ee53a135618a583c4bca1f9ef65e96684be42accf6f430b6a20ec1N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1d9db973f7ee53a135618a583c4bca1f9ef65e96684be42accf6f430b6a20ec1N.exe
Resource
win10v2004-20240802-en
General
-
Target
1d9db973f7ee53a135618a583c4bca1f9ef65e96684be42accf6f430b6a20ec1N
-
Size
342KB
-
MD5
f99fe9fd1210121a228225be14bbcd90
-
SHA1
01f4b711c439a1e54c77cbe2ace816d874505b85
-
SHA256
1d9db973f7ee53a135618a583c4bca1f9ef65e96684be42accf6f430b6a20ec1
-
SHA512
e8a1d47d24f13f456853589321c5b430cd7d6a7a5ed8074043c777ee92195a55d5c46f64461c86e823bfdd89f93f6021e02d188a589f0676025559e3e97edddf
-
SSDEEP
6144:Vt5MtALcSj5PSXyggMfOLRTYO+9wTLfdvyhEwFUsjRLTt+/j8/3b2:VtxFhgh2R8O+yFqpLh+4i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d9db973f7ee53a135618a583c4bca1f9ef65e96684be42accf6f430b6a20ec1N
Files
-
1d9db973f7ee53a135618a583c4bca1f9ef65e96684be42accf6f430b6a20ec1N.exe windows:4 windows x86 arch:x86
816fa65e92598966cbdc508ee65b83e4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
FreeEnvironmentStringsA
CreateFileA
IsDebuggerPresent
HeapCreate
LocalFree
GetACP
CreateWaitableTimerA
FindClose
GetModuleHandleA
CreateFileMappingA
lstrlenA
LoadLibraryExA
CreateEventA
GetStdHandle
GlobalUnlock
GlobalLock
IsBadReadPtr
CloseHandle
GetLastError
user32
GetMessageA
GetSubMenu
IsMenu
GetDlgItem
SetFocus
DialogBoxParamA
DispatchMessageA
RedrawWindow
CheckMenuItem
ClipCursor
GetDlgItemTextA
GetParent
EndDialog
DrawIconEx
apphelp
ApphelpShowDialog
ApphelpCheckRunApp
SdbCloseDatabase
SdbFindFirstTag
ApphelpCheckIME
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ