Static task
static1
Behavioral task
behavioral1
Sample
587139887ad8d80facc1a0cb4144b3f881cf40a3f25cac7d8caf5a53a96fb146N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
587139887ad8d80facc1a0cb4144b3f881cf40a3f25cac7d8caf5a53a96fb146N.exe
Resource
win10v2004-20241007-en
General
-
Target
587139887ad8d80facc1a0cb4144b3f881cf40a3f25cac7d8caf5a53a96fb146N
-
Size
58KB
-
MD5
1f1f76babfe0d8db1d6e5b894bbb4930
-
SHA1
fc841ae3fe0531a18108d45cd23d3dfbf911a327
-
SHA256
587139887ad8d80facc1a0cb4144b3f881cf40a3f25cac7d8caf5a53a96fb146
-
SHA512
702c47356bd7ca819086b8c2647e015e9b869303fdb2094b32082588c7a27790aab70852d154d96db91f6dd9c29963a4f3d2f275f5880a13a14860afb1c865a3
-
SSDEEP
1536:RETE4IWkkkkkkkkkkkkaie9hY1moVtpOQtSS9SxZcAXc+0I:2Eqkkkkkkkkkkkkaie9hJ6mS80I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 587139887ad8d80facc1a0cb4144b3f881cf40a3f25cac7d8caf5a53a96fb146N
Files
-
587139887ad8d80facc1a0cb4144b3f881cf40a3f25cac7d8caf5a53a96fb146N.exe windows:4 windows x86 arch:x86
aafe9a40777c984b96982ddd780b4c29
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbghelp
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
FindFileInPath
kernel32
VirtualAlloc
GetWindowsDirectoryA
TlsFree
GetDiskFreeSpaceA
CreateFileA
FindClose
_lread
GetACP
TlsFree
TlsFree
DebugBreakProcess
GetConsoleTitleA
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
Beep
SetCommMask
Sections
.text Size: 512B - Virtual size: 462B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE