Static task
static1
Behavioral task
behavioral1
Sample
a739b41636bde36f08a5e5d434c4f75421f0d4e77116255d30f22a6c6a6cd2d2N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a739b41636bde36f08a5e5d434c4f75421f0d4e77116255d30f22a6c6a6cd2d2N.exe
Resource
win10v2004-20241007-en
General
-
Target
a739b41636bde36f08a5e5d434c4f75421f0d4e77116255d30f22a6c6a6cd2d2N
-
Size
47KB
-
MD5
28cf11ab2a740d8ebdb5e539f659ce10
-
SHA1
22bc96d8b4a2a2f786a1e47f655b206adf209d11
-
SHA256
a739b41636bde36f08a5e5d434c4f75421f0d4e77116255d30f22a6c6a6cd2d2
-
SHA512
10a5db79f7e51f5be5eaa146aed2062a5970f1fa4a11510532d7987d2f44b843923444d8bb0a4129881e5a7aa02f35bc9d34467655d6b6cad0763aeabb44d033
-
SSDEEP
768:idR2k04y8X/vIlVP1XMsVGnb6BCodkUK:idnhvvIlDcCjoodnK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a739b41636bde36f08a5e5d434c4f75421f0d4e77116255d30f22a6c6a6cd2d2N
Files
-
a739b41636bde36f08a5e5d434c4f75421f0d4e77116255d30f22a6c6a6cd2d2N.exe windows:5 windows x86 arch:x86
f41d0a33b35495e27d8813ba1d24ec8b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
msdxm.ocx
RunDllW
Sections
.text Size: 512B - Virtual size: 433B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE