Static task
static1
Behavioral task
behavioral1
Sample
fe2a3cf01e8347a4b109a0541bbcd63a7fbf68c08a4f7536e820800df87c7684N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fe2a3cf01e8347a4b109a0541bbcd63a7fbf68c08a4f7536e820800df87c7684N.exe
Resource
win10v2004-20241007-en
General
-
Target
fe2a3cf01e8347a4b109a0541bbcd63a7fbf68c08a4f7536e820800df87c7684N.exe
-
Size
113KB
-
MD5
b53a5f2f9e551e3f54a2017d32c6edf0
-
SHA1
c3196cea63bea602bd9974fd51c23eb5778baeab
-
SHA256
fe2a3cf01e8347a4b109a0541bbcd63a7fbf68c08a4f7536e820800df87c7684
-
SHA512
b3105c463065144703babd911a5d99564ef9b54d17ad36a6406ba7300be89da786b0180faf3b6b337d58e6a35f9b026c48f422d70f869ffc73798124e8fabee9
-
SSDEEP
1536:HCW3sBK3avjaHyimb4lpXlz/AoJut3pdTrjlpVMJ+XbwDotizl7D4tjU:Hj3SK3aLaHppVz/vuDT9piJ1zl34tjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe2a3cf01e8347a4b109a0541bbcd63a7fbf68c08a4f7536e820800df87c7684N.exe
Files
-
fe2a3cf01e8347a4b109a0541bbcd63a7fbf68c08a4f7536e820800df87c7684N.exe.exe windows:4 windows x86 arch:x86
020bde691dbcdf93c9bf181f8ee102e9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetExitCodeProcess
GetLogicalDrives
TlsAlloc
SetLastError
GetConsoleTitleA
GetStringTypeW
HeapFree
GetShortPathNameW
SetPriorityClass
GetVersion
GetModuleHandleA
GetLocalTime
HeapCreate
SetFilePointer
GetModuleHandleW
GetStdHandle
GetLastError
lstrcatW
SetEnvironmentVariableA
GetDriveTypeA
lstrcmpiA
IsValidCodePage
netshell
DllRegisterServer
HrLaunchConnection
DllGetClassObject
DllCanUnloadNow
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE