Static task
static1
Behavioral task
behavioral1
Sample
6debc71c4c074f1ecf145c13ab45d1fcfb277213073929b69986f6aaa2807245.dll
Resource
win7-20241010-en
General
-
Target
6debc71c4c074f1ecf145c13ab45d1fcfb277213073929b69986f6aaa2807245.exe
-
Size
120KB
-
MD5
43f3db01348ce08eb7222e1e2ca87809
-
SHA1
0c1e5cbcf8a737dae98d70a2f19bb70f47ce0008
-
SHA256
6debc71c4c074f1ecf145c13ab45d1fcfb277213073929b69986f6aaa2807245
-
SHA512
f1802d4f86e90f288c7b553946fdba9e09cf4d411aaf2a9ef59f96d6639a352d96cb894b39803f44f9a8e86811f5226d1f3a7283af1bea0636b4597abf65f1f4
-
SSDEEP
3072:b5W6E3xTMFg52U2G6Tkctvzw8iYI67Ps9eEri:c6EBmi2U+k0wYnPs9en
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6debc71c4c074f1ecf145c13ab45d1fcfb277213073929b69986f6aaa2807245.exe
Files
-
6debc71c4c074f1ecf145c13ab45d1fcfb277213073929b69986f6aaa2807245.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ