Static task
static1
Behavioral task
behavioral1
Sample
f1a286559610df0f7fb8048a04be42dedaddbab1059496f169d9faf933fdd70d.dll
Resource
win7-20241010-en
General
-
Target
f1a286559610df0f7fb8048a04be42dedaddbab1059496f169d9faf933fdd70d.exe
-
Size
120KB
-
MD5
1c0ac0c375e4d97e7578c0b5193efcb1
-
SHA1
4230ae2d1c351b78f34c8726ff18012508aac1dc
-
SHA256
f1a286559610df0f7fb8048a04be42dedaddbab1059496f169d9faf933fdd70d
-
SHA512
261b12240d0184d65aceb6d6f7308a68582e5fe1f915b0cb962c8a5b8f358d89c05c18930822ba65aead1c202936fd3895baf6a1376f21eb380a0dd6d7937f7c
-
SSDEEP
3072:47PC+cPGZM521ArUJfnfplyprtAoyPBA5:4763QjAifDiEy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f1a286559610df0f7fb8048a04be42dedaddbab1059496f169d9faf933fdd70d.exe
Files
-
f1a286559610df0f7fb8048a04be42dedaddbab1059496f169d9faf933fdd70d.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ