Static task
static1
Behavioral task
behavioral1
Sample
0575ce888e76fe0c1f4ac75200240bd39a5b2440561d3558958c14338839c1feN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0575ce888e76fe0c1f4ac75200240bd39a5b2440561d3558958c14338839c1feN.exe
Resource
win10v2004-20241007-en
General
-
Target
0575ce888e76fe0c1f4ac75200240bd39a5b2440561d3558958c14338839c1feN
-
Size
26KB
-
MD5
1a61c9075b2e2d9750e217a283b67fd0
-
SHA1
5a6604b3953fc447611242d628db9cf8b49e86ea
-
SHA256
0575ce888e76fe0c1f4ac75200240bd39a5b2440561d3558958c14338839c1fe
-
SHA512
caf19886d040ba1e6e17b8fe270be2602edef7ffa01446d4bf0c2126d78bc47b4ab4ca04e29674fb5ef270f370217c5262da7ed4c2e3c7b695ce157419c8a953
-
SSDEEP
768:UZqCb278qp0IB0+0wqYYbwiG/cQ+sn93jdg1KWMAhuaniXCrZokj:UZqCb23bTdljWMAYaiXYZtj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0575ce888e76fe0c1f4ac75200240bd39a5b2440561d3558958c14338839c1feN
Files
-
0575ce888e76fe0c1f4ac75200240bd39a5b2440561d3558958c14338839c1feN.exe windows:4 windows x86 arch:x86
0e801db0ad15d63b7d0b5bdc95a05f5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCriticalSectionSpinCount
CreateTapePartition
EnumSystemCodePagesW
InitializeCriticalSection
PrepareTape
ExitVDM
IsDebuggerPresent
SetNamedPipeHandleState
GetCompressedFileSizeA
GetNamedPipeHandleStateA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE