Static task
static1
Behavioral task
behavioral1
Sample
b82eb022559d3938e5d530703383b90632a88ef4a2ede404e71d0c8d3ebea2baN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b82eb022559d3938e5d530703383b90632a88ef4a2ede404e71d0c8d3ebea2baN.exe
Resource
win10v2004-20241007-en
General
-
Target
b82eb022559d3938e5d530703383b90632a88ef4a2ede404e71d0c8d3ebea2baN
-
Size
127KB
-
MD5
2add189ff60319a0f3cb6909e2cba770
-
SHA1
90098cc5c3a2c470921bd6cc2cfdf4c9083e523c
-
SHA256
b82eb022559d3938e5d530703383b90632a88ef4a2ede404e71d0c8d3ebea2ba
-
SHA512
4f24b29a52be9c709f080fd986c1467dfce38871075c627df6215420ffa8dfd10a0c7cb8f64175e3ff22b283dc6d87478bb56368ad1f68ef8d056e1b9fa64b79
-
SSDEEP
3072:wEBnsT9ZjoQIgiJbDDDWNjB1bYr3GUR3OqpxazU0zb7xkzD:mI3J/DDWNLbqWHq6zU0vNkzD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b82eb022559d3938e5d530703383b90632a88ef4a2ede404e71d0c8d3ebea2baN
Files
-
b82eb022559d3938e5d530703383b90632a88ef4a2ede404e71d0c8d3ebea2baN.exe windows:4 windows x86 arch:x86
61a785e34e8e786166c388e5283b186c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateMutexW
GetModuleHandleW
GetLastError
LeaveCriticalSection
SetFileTime
FindResourceA
SetFileTime
FormatMessageW
SetFileTime
ReadFile
IsBadWritePtr
GetModuleHandleA
InitializeCriticalSection
HeapCreate
GetFileSize
CloseHandle
SetFileAttributesW
lstrcpyA
lstrcatA
GetStartupInfoW
GetLocalTime
msi
MsiCloseAllHandles
MsiCloseHandle
MsiCreateRecord
MsiAdvertiseProductA
user32
LoadCursorW
PostMessageW
wsprintfW
SetCursorPos
GetWindowLongW
IsZoomed
PeekMessageW
DispatchMessageA
GetWindowTextA
IsDialogMessageA
GetWindowRect
SetFocus
IsWindow
wldap32
ldap_add
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 129B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE