Static task
static1
Behavioral task
behavioral1
Sample
70384e668b5fafee07108f165d1e98eda4d3a4822dfc8be46f6e255e6a8a798fN.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
70384e668b5fafee07108f165d1e98eda4d3a4822dfc8be46f6e255e6a8a798fN.exe
Resource
win10v2004-20241007-en
General
-
Target
70384e668b5fafee07108f165d1e98eda4d3a4822dfc8be46f6e255e6a8a798fN.exe
-
Size
238KB
-
MD5
0b69cf6e60fb68d4eec9978f5472b541
-
SHA1
d254dd425b4807ed2daec3782033f1ba0fd15370
-
SHA256
f0f7f1041caa54f45792c18f9c7e80031e5e31abb3d046f5ab7222e3263b16d8
-
SHA512
8b21ad7bf9fb10009a6b895eb2004bcb411b93c88c3922e6b57e2118b8596e22cc5c768f2f4d998dcb3a02ed6307887e07e84f8b4acb5dfee74f18418907ca37
-
SSDEEP
3072:PDVef/hIVofyhSOUuC4v/oVx8Gugbdm9AYvZz5THnbez3PoL9Uw:PDc/hIifyPGugbdzYow9h
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 70384e668b5fafee07108f165d1e98eda4d3a4822dfc8be46f6e255e6a8a798fN.exe
Files
-
70384e668b5fafee07108f165d1e98eda4d3a4822dfc8be46f6e255e6a8a798fN.exe.exe windows:4 windows x86 arch:x86
c62d0f69a314bf7274d6af30d5c4bbbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
DeleteCriticalSection
EnterCriticalSection
FindFirstFileA
FindNextFileA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_strcmpi
_unlock
abort
calloc
exit
fclose
fopen
fprintf
fread
free
fwrite
malloc
memcpy
puts
rename
signal
sprintf
strcmp
strlen
strncmp
strrchr
vfprintf
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE