Static task
static1
Behavioral task
behavioral1
Sample
0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235N.exe
Resource
win7-20241023-en
General
-
Target
0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235N
-
Size
49KB
-
MD5
84e63751dcce88297cfdae111ed1b020
-
SHA1
7ede73c969958ad17f20e6edcd5f3908b92993f7
-
SHA256
0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235
-
SHA512
149401fe32f0a44bbef51e2186a18b8ef5c8e2dd85ca8d45c36b9258c5357115ca62423f357886e38711e0a35d83cdfe0a928ce1b549d901408b6ea32f456fa4
-
SSDEEP
1536:834/PC7Ruz3hRXRASULZ6JKYdbzcmhCZnc:It7R8fU6n8c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235N
Files
-
0976fa202dbca5915c19b5c64ee52c0f412023ca5e36bf248af70b4d48938235N.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
UIJDHTEY Size: - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UIJDHTEY Size: 47KB - Virtual size: 48KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE