Static task
static1
Behavioral task
behavioral1
Sample
64237b8288e6f80bdae8b2678e1f9a7a6b79ec88b6a03e67fdb52b411207fb7aN.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
64237b8288e6f80bdae8b2678e1f9a7a6b79ec88b6a03e67fdb52b411207fb7aN.exe
Resource
win10v2004-20241007-en
General
-
Target
64237b8288e6f80bdae8b2678e1f9a7a6b79ec88b6a03e67fdb52b411207fb7aN
-
Size
2.0MB
-
MD5
9d2ffd327def3a29c10ce88a83ab99f0
-
SHA1
6985e3818e067122f1dd94dc16e3cc832741fc87
-
SHA256
64237b8288e6f80bdae8b2678e1f9a7a6b79ec88b6a03e67fdb52b411207fb7a
-
SHA512
680d19d454e6c7bf79cdc67ffadd8b0557dca109e8bd8786ff621da2f7ee0995ada218e58747c3f8d3dca1c9b806aab9133628c602aae68f20ee2ae75f7d8341
-
SSDEEP
24576:FjR40kN90KbZwpS3FrqZq4cv0nFV0bL/ExAuSHFGtBbp4tyyCBFQpHoW3TYP2tgu:FCNmp8rZ4ccFVMM0B34jULTNNy5u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64237b8288e6f80bdae8b2678e1f9a7a6b79ec88b6a03e67fdb52b411207fb7aN
Files
-
64237b8288e6f80bdae8b2678e1f9a7a6b79ec88b6a03e67fdb52b411207fb7aN.exe windows:4 windows
046c378746ea619b7fc99a6e0dddb8ea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
VirtualAlloc
user32
GetClipboardSequenceNumber
Sections
.text Size: 672KB - Virtual size: 672KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE