Static task
static1
Behavioral task
behavioral1
Sample
471e307b0f8628c1e95b296ab35bcb4e8698fe12c03f63758a5b5fc3454c4529N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
471e307b0f8628c1e95b296ab35bcb4e8698fe12c03f63758a5b5fc3454c4529N.exe
Resource
win10v2004-20241007-en
General
-
Target
471e307b0f8628c1e95b296ab35bcb4e8698fe12c03f63758a5b5fc3454c4529N
-
Size
296KB
-
MD5
2d89762164ed987fd80132e04a859220
-
SHA1
bc3c433d07ce3f703ca1ce1220825312129f8b80
-
SHA256
471e307b0f8628c1e95b296ab35bcb4e8698fe12c03f63758a5b5fc3454c4529
-
SHA512
fa720a9e0ad6e3db5854d4a2739ac17dfe3cd4e8145874fb4da5c0b7037c998674f0a69af00e65eebf731533a9fa92d4320229112bd57c6cc764c1a85a7a10c0
-
SSDEEP
6144:PeH4vkLjjjjjjjFewEyUmUG1fJGIk/ug80u60BZj7WQBy9:PeH4GewEdxifJYugdu60DjaGW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471e307b0f8628c1e95b296ab35bcb4e8698fe12c03f63758a5b5fc3454c4529N
Files
-
471e307b0f8628c1e95b296ab35bcb4e8698fe12c03f63758a5b5fc3454c4529N.exe windows:5 windows x86 arch:x86
abf768950951b8a14b943feb91232681
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
CreateEventW
GetStringTypeW
ReadConsoleA
InterlockedDecrement
WaitForSingleObject
FindResourceW
GetLastError
lstrcmpA
DeviceIoControl
ExitProcess
Heap32First
SetEnvironmentVariableA
CloseHandle
GetPrivateProfileIntA
lstrcpyW
LoadLibraryA
GetDiskFreeSpaceW
ReadFileEx
InterlockedIncrement
GetDiskFreeSpaceW
adsldpc
ADsCloseSearchHandle
ADsExecuteSearch
ADsEnumAttributes
ADsDeleteClassDefinition
clbcatq
SetupOpen
SetupOpen
CheckMemoryGates
SetSetupSave
CheckMemoryGates
SetSetupSave
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject
CheckMemoryGates
DllGetClassObject
SetupOpen
version
VerFindFileA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 292KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ