Static task
static1
Behavioral task
behavioral1
Sample
101fb4083ea76782a7220b9ba649b815671f67b7d8d97bc95df2a48ed0620c13N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
101fb4083ea76782a7220b9ba649b815671f67b7d8d97bc95df2a48ed0620c13N.exe
Resource
win10v2004-20241007-en
General
-
Target
101fb4083ea76782a7220b9ba649b815671f67b7d8d97bc95df2a48ed0620c13N
-
Size
284KB
-
MD5
5667421d40ee907808815822d5a80a00
-
SHA1
fda68c64c306d54a6aa0c778b20bf1b82ffa6547
-
SHA256
101fb4083ea76782a7220b9ba649b815671f67b7d8d97bc95df2a48ed0620c13
-
SHA512
ffd08a096b8d5b495dffc0cf367832e984df013cd4f89cb0c9c5ed6932d56c700743455e5ed135515a2561fe8cd2f05fb86a62c9a9bf6f577dc756ffa877a6c3
-
SSDEEP
6144:SG/JGjQnQTNgl979k4zyPr5tRdzB6hW+SVXRdF+VTqnaPhsesQck:9/AQnQwPE5tRd0h9IIhsOck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 101fb4083ea76782a7220b9ba649b815671f67b7d8d97bc95df2a48ed0620c13N
Files
-
101fb4083ea76782a7220b9ba649b815671f67b7d8d97bc95df2a48ed0620c13N.exe windows:4 windows x86 arch:x86
4d2efee6f5edd66280cb0c8846157bf1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
GetCurrentThread
GetACP
InterlockedExchange
DeleteAtom
GetThreadPriority
GetExpandedNameA
HeapCreate
VirtualProtect
WriteConsoleA
GetModuleHandleA
FlushFileBuffers
GetCurrentProcess
GetTimeFormatA
GetStdHandle
GetEnvironmentStringsA
FormatMessageA
LoadLibraryA
IsDebuggerPresent
GetCurrentProcessId
HeapDestroy
user32
EndPaint
ShowWindow
wsprintfA
GetCursorPos
FillRect
DragDetect
GetDlgItem
GetWindowTextLengthA
GetParent
GetWindow
GetClassNameA
BeginPaint
DrawTextA
SetActiveWindow
GetFocus
ReleaseDC
FrameRect
GetTitleBarInfo
SetForegroundWindow
advapi32
RegQueryInfoKeyA
RegCloseKey
RegCreateKeyA
RegFlushKey
RegEnumKeyA
clbcatq
CoRegCleanup
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 972KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ