Static task
static1
Behavioral task
behavioral1
Sample
572d3d13e8fb670313b0420cecb3ab45b7f5bdfc35e447b8a75a9332e0c16b38.dll
Resource
win7-20240903-en
General
-
Target
572d3d13e8fb670313b0420cecb3ab45b7f5bdfc35e447b8a75a9332e0c16b38.exe
-
Size
120KB
-
MD5
ed4e06260325d801cf676e397ef6cc05
-
SHA1
1e9c1f24169eb0b377dbe1fa8f429980497017cc
-
SHA256
572d3d13e8fb670313b0420cecb3ab45b7f5bdfc35e447b8a75a9332e0c16b38
-
SHA512
9867db36ec3f36caef3fb5fd79746e556e90fb543727299f2682555e1d47b2ac34d110214b2a3f5f7a9e04dec37f131d7d612429c2c87191a63c163398a82bed
-
SSDEEP
3072:zUHyMSJl91vcoZ1R98P5Wk4pDg/An+GTxBJ:zIi945rWDg/A+GJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 572d3d13e8fb670313b0420cecb3ab45b7f5bdfc35e447b8a75a9332e0c16b38.exe
Files
-
572d3d13e8fb670313b0420cecb3ab45b7f5bdfc35e447b8a75a9332e0c16b38.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ