Static task
static1
Behavioral task
behavioral1
Sample
1d278b7dfb4f2d977e15662e33a0a096f681717c921dd8de2eb7b5e1bd55059eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1d278b7dfb4f2d977e15662e33a0a096f681717c921dd8de2eb7b5e1bd55059eN.exe
Resource
win10v2004-20240802-en
General
-
Target
1d278b7dfb4f2d977e15662e33a0a096f681717c921dd8de2eb7b5e1bd55059eN
-
Size
5.9MB
-
MD5
bd9cc93068d401f88a2a5c537f19b4c0
-
SHA1
63dc1735bec29d468a80fe45a8a6f16f1b1f2b09
-
SHA256
1d278b7dfb4f2d977e15662e33a0a096f681717c921dd8de2eb7b5e1bd55059e
-
SHA512
198ea7ee3e62a00a9e7e3ea7a4fdd7981967fbc6eb49a4f9a3a6ea54e2cb277d50f3cf23610571b1fed7879e5c15d40f0a00d152ecbb477e8ee47117545af6d8
-
SSDEEP
98304:UY+uAH655bmZ2Ixu+FIFPQ25UTzLrJGEnP77qt4Qj3QubzAT66qiT3GRmYugmJtL:OQ5Z+F8Pr2PJvnqmU/bH702MVgmNNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d278b7dfb4f2d977e15662e33a0a096f681717c921dd8de2eb7b5e1bd55059eN
Files
-
1d278b7dfb4f2d977e15662e33a0a096f681717c921dd8de2eb7b5e1bd55059eN.exe windows:5 windows x86 arch:x86
8a7144716015fefc4920a45528d0fa9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CbOb Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
.`o$ Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Y<i Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.VCF Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ