Static task
static1
Behavioral task
behavioral1
Sample
0dab0831b3a3bd13be0991801e17256e54620f43722b95eb975dbe6aa444b79bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0dab0831b3a3bd13be0991801e17256e54620f43722b95eb975dbe6aa444b79bN.exe
Resource
win10v2004-20241007-en
General
-
Target
0dab0831b3a3bd13be0991801e17256e54620f43722b95eb975dbe6aa444b79bN
-
Size
634KB
-
MD5
dcba02bf898945c5ac002b2dde14d1c0
-
SHA1
81210b7563aa5a638179dbb087ff77fdc041cb72
-
SHA256
0dab0831b3a3bd13be0991801e17256e54620f43722b95eb975dbe6aa444b79b
-
SHA512
f44f66fc590e91a37cf38e3748fb40babb8261e86e0e603d10b03576f034e3852fe400611377ac2286e47d2810f75b7c996559c672a5f7462768d33534c43776
-
SSDEEP
12288:1AsrVXc3ajG+hjQKymY8efKCpD7Gj9G6G1qT8nQkCu83L3Wl/np9DBDt3kbE:pVsqjnhMgeiCl7G0nehbGZpbD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0dab0831b3a3bd13be0991801e17256e54620f43722b95eb975dbe6aa444b79bN
Files
-
0dab0831b3a3bd13be0991801e17256e54620f43722b95eb975dbe6aa444b79bN.exe windows:4 windows x86 arch:x86
16cd117fdb6064029c913d9d920b7859
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
cygwin1
__assert
__ctype_ptr__
__errno
__getreent
__main
_dll_crt0@0
_fopen64
_impure_ptr
abort
accept
atexit
atof
atoi
bind
calloc
chdir
close
connect
cygwin_create_path
cygwin_detach_dll
cygwin_internal
dll_dllcrt0
exit
fclose
fflush
fork
fprintf
fread
free
fwrite
getenv
gethostbyname
getpeername
getpid
getsockname
getsockopt
gettimeofday
h_errno
inet_ntop
inet_pton
listen
localtime
malloc
memcpy
memset
perror
printf
pthread_atfork
pthread_cancel
pthread_cond_broadcast
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_create
pthread_detach
pthread_exit
pthread_getspecific
pthread_key_create
pthread_mutex_destroy
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_unlock
pthread_once
pthread_self
pthread_setspecific
putchar
read
realloc
recv
recvfrom
sched_yield
select
send
sendto
setitimer
setsid
setsockopt
sigaction
sigemptyset
signal
snprintf
socket
sscanf
strcmp
strcpy
strerror
strftime
strlen
strncmp
strtol
time
toupper
vsnprintf
write
kernel32
AddAtomA
FindAtomA
GetAtomNameA
GetModuleFileNameW
GetModuleHandleA
GetStdHandle
VirtualProtect
VirtualQuery
WriteFile
Sections
.text Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE