Static task
static1
Behavioral task
behavioral1
Sample
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN.exe
Resource
win7-20240903-en
General
-
Target
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN
-
Size
330KB
-
MD5
bb675c9e0bf8090c602b8e63a5fc8d30
-
SHA1
b16746c27c1769d8107b0809646ceee2b6a1b779
-
SHA256
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269c
-
SHA512
3185f510b80251fd4fe3baf81a4d42a7db84f77454118bf4d6ae872dec2cdea2b80f0ddbd54a54a83ed91e7d88becec374c36723156381355e9a919b7e011ef9
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVZ:vHW138/iXWlK885rKlGSekcj66ciEZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN
Files
-
0f1afdd43419f1539f7b10612ca4ab3f2dcf000780475e0e89c224ede0c5269cN.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 301KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE