fillResourceMap
Static task
static1
Behavioral task
behavioral1
Sample
37016e95717e3908c5d79f248a42c849ba6f5f2acad163c94dea70f71846d362N.dll
Resource
win7-20240903-en
General
-
Target
37016e95717e3908c5d79f248a42c849ba6f5f2acad163c94dea70f71846d362N.exe
-
Size
116KB
-
MD5
41e680c2f1210e19230af1c2d03da3e0
-
SHA1
5951b49a3c7ce85507ba6096ab05c52b6a1a64c3
-
SHA256
37016e95717e3908c5d79f248a42c849ba6f5f2acad163c94dea70f71846d362
-
SHA512
3844feae47f2a7930b2081d365976a794bbcb8d1ea19902faf73e9a2e9245005fd748327133d34ad58ce4fbb39b031e3ecff1e404f56a325e7bf1fea9d2638bd
-
SSDEEP
1536:juTLBvTKbySZyICNoOk619WQaJVYNyA3M1xgbbKEBQxK74G5BIq5ewYYN:jc4bygyICNoOXnWQOVYNg9EQxa7w2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37016e95717e3908c5d79f248a42c849ba6f5f2acad163c94dea70f71846d362N.exe
Files
-
37016e95717e3908c5d79f248a42c849ba6f5f2acad163c94dea70f71846d362N.exe.dll windows:4 windows x86 arch:x86
6d39f6c552eeeb6553fbef88bc36f1fd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
ExitProcess
GetCurrentProcess
GetOEMCP
GetCommandLineA
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
SetFilePointer
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
RtlUnwind
SetStdHandle
FlushFileBuffers
CloseHandle
GetVersion
GetLastError
GetCPInfo
GetACP
VirtualAlloc
user32
MessageBoxA
LoadStringA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE