Static task
static1
Behavioral task
behavioral1
Sample
586d5f79e715593b50be0ff7b6927ad437d7bdd74680a201f7fa59dfa4a4fa1c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
586d5f79e715593b50be0ff7b6927ad437d7bdd74680a201f7fa59dfa4a4fa1c.exe
Resource
win10v2004-20240802-en
General
-
Target
586d5f79e715593b50be0ff7b6927ad437d7bdd74680a201f7fa59dfa4a4fa1c
-
Size
380KB
-
MD5
1059778682b2633b50ca1018205346c1
-
SHA1
9e98b5cd57d9bf03436c745dee1cbcc4c07b24cf
-
SHA256
586d5f79e715593b50be0ff7b6927ad437d7bdd74680a201f7fa59dfa4a4fa1c
-
SHA512
5ee6cfa380f438fb713ebff3e56558651cc82ea4c31ae3ec4b78a3672940648bf68c928ff2ee49ca4db45eaebf90b5f62408108c4ce7f114caf6c227c4486f6f
-
SSDEEP
6144:MLM1XXQCT3cCKViGsJXeTUX0LOFjiQ1PBQb7ahV6Je:M4F3GsJXeTUE1gOb7avIe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 586d5f79e715593b50be0ff7b6927ad437d7bdd74680a201f7fa59dfa4a4fa1c
Files
-
586d5f79e715593b50be0ff7b6927ad437d7bdd74680a201f7fa59dfa4a4fa1c.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.M3n3 Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.M3n3 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE