Static task
static1
Behavioral task
behavioral1
Sample
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe
Resource
win7-20241023-en
General
-
Target
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe
-
Size
275KB
-
MD5
4f484ec903da6d4e4fca1f56b3a0f5e0
-
SHA1
053c14798282218e84fadacb5b7c06129cc73b38
-
SHA256
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1
-
SHA512
eecafc7fd8acf4f08459150a9e8d1a2a32b6a7e9fc7205c57807209784b6c4a1d967aee842031c8547aaeb4ad50f758f8cf2bc7166ccda2cef835a2d6f4017c8
-
SSDEEP
6144:YBJz8I3EKuteh0AemMzbUNnWNt+xXEUPW:6B8I0vtHLPUNWv+xXDW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe
Files
-
643551061bb861652f3ed1c650483526cd40985c09440becd403eb42444b75b1N.exe.exe windows:5 windows x86 arch:x86
fece66ca0c6f42a00a3ef1bbe1e4ea01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteW
ws2_32
WSAGetLastError
iphlpapi
GetAdaptersInfo
Sections
.text Size: 55KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 201KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
POKJGRDT Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE