Static task
static1
Behavioral task
behavioral1
Sample
658752ba9a98b9a176411424d2cd5cbd33088e0c59645015dd2f76284added58N.exe
Resource
win7-20240903-en
General
-
Target
658752ba9a98b9a176411424d2cd5cbd33088e0c59645015dd2f76284added58N.exe
-
Size
432KB
-
MD5
3880845a9a58821707b0354fca94a9c0
-
SHA1
8a42949c4466401dc1a3c6accda078a915dc3892
-
SHA256
658752ba9a98b9a176411424d2cd5cbd33088e0c59645015dd2f76284added58
-
SHA512
1c0bd3d5648807c8e21d5a388d6c003f05a75503a51c6e464612647c5ccdbfadca49f65a277f30389743c3610e1ee2346d79eb7c891f5cfa09c7481d4c65e75d
-
SSDEEP
12288:nlDzNwTWdB4fEBcjMAKfxTDyZ6MnfZm01lNphrVD:nlKTgB+EKKJTDyo0hv1lNpjD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 658752ba9a98b9a176411424d2cd5cbd33088e0c59645015dd2f76284added58N.exe
Files
-
658752ba9a98b9a176411424d2cd5cbd33088e0c59645015dd2f76284added58N.exe.exe windows:5 windows x86 arch:x86
44e7af86d13bd689602e96dccc077d31
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
lstrcatA
GetModuleHandleA
ExitProcess
MoveFileExA
WaitForSingleObject
GetModuleFileNameA
user32
CopyIcon
SetSystemCursor
LoadCursorA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE