Static task
static1
Behavioral task
behavioral1
Sample
b524fa136b68fb4db0e146de32fca9939e626df92bac81bbe3e507cf1734779bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
b524fa136b68fb4db0e146de32fca9939e626df92bac81bbe3e507cf1734779bN.exe
Resource
win10v2004-20241007-en
General
-
Target
b524fa136b68fb4db0e146de32fca9939e626df92bac81bbe3e507cf1734779bN
-
Size
176KB
-
MD5
8a408f25a8d9e871120ec94ff075b5d0
-
SHA1
fd8c496b3b4f4f92c700b7b745e247e4f32198c3
-
SHA256
b524fa136b68fb4db0e146de32fca9939e626df92bac81bbe3e507cf1734779b
-
SHA512
d5c73102e5351f6ef3b69701406f728583ea796a0053ac906f3d3caf335a41f9bd083899479e280f0b89fcb8c0ce786d649a021d3a8a6b56bad500b0a6fe1e07
-
SSDEEP
3072:4g2abTB0aeaOVzzRVWcARmp5R8qXlm0NDijVJcevgip7R+60Y6KLj54l3Irml:f2yIPR4eFXxiIT8lvD6KLj5qq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b524fa136b68fb4db0e146de32fca9939e626df92bac81bbe3e507cf1734779bN
Files
-
b524fa136b68fb4db0e146de32fca9939e626df92bac81bbe3e507cf1734779bN.exe windows:4 windows x86 arch:x86
006444e8ea36844e4df6b9d8f195c331
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
GetCalendarInfoW
GetLocaleInfoA
HeapReAlloc
HeapDestroy
LoadLibraryW
CloseHandle
GetStdHandle
SystemTimeToFileTime
CreateFileW
EnumResourceNamesA
GetProcessHeap
GetSystemTime
LoadLibraryExW
FindFirstFileW
GetThreadLocale
HeapAlloc
WriteFile
HeapSize
HeapFree
lstrcpynW
oleacc
LresultFromObject
CreateStdAccessibleObject
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ