Static task
static1
Behavioral task
behavioral1
Sample
d26fce7ada9e6990ad28ffdd16f8b677fcd416861a264002409d91d061b91e67N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d26fce7ada9e6990ad28ffdd16f8b677fcd416861a264002409d91d061b91e67N.exe
Resource
win10v2004-20240802-en
General
-
Target
d26fce7ada9e6990ad28ffdd16f8b677fcd416861a264002409d91d061b91e67N
-
Size
66KB
-
MD5
f493028ed961f2b69e7237e630271e10
-
SHA1
54ba9d10e9c725d8baa98d9c4e3eaad681dfae89
-
SHA256
d26fce7ada9e6990ad28ffdd16f8b677fcd416861a264002409d91d061b91e67
-
SHA512
531db91a8e56b734957e70a8bf4af9f666f38d3feae5290eada5c2f80ce3966bcdffae63340c516d5ba5b6436b367ebaee7dea89d7386eeac49a4e9ae31e3fac
-
SSDEEP
1536:JnHwanp2JVJdQpbet8VWVHUcyHrVths46N8uiLS7v4:JnHwap4VJdCatDArs46SunA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d26fce7ada9e6990ad28ffdd16f8b677fcd416861a264002409d91d061b91e67N
Files
-
d26fce7ada9e6990ad28ffdd16f8b677fcd416861a264002409d91d061b91e67N.exe windows:4 windows x86 arch:x86
0db04a26b6b9f983a693086f55f61622
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
LocalFlags
lstrcpyn
MapViewOfFile
LoadLibraryA
VirtualFree
CreateConsoleScreenBuffer
SetCommMask
CopyFileExW
SetConsoleNumberOfCommandsA
GetSystemRegistryQuota
Module32First
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE