Static task
static1
Behavioral task
behavioral1
Sample
8cc7de7617fd026490164271f3792603327fe251f3b4165980b30564d6a981e2.dll
Resource
win7-20240729-en
General
-
Target
8cc7de7617fd026490164271f3792603327fe251f3b4165980b30564d6a981e2.exe
-
Size
120KB
-
MD5
81ff6c3cfb68b9a155f50fedd6043985
-
SHA1
7363aabe455035c4bb95c068798190590f2b02ff
-
SHA256
8cc7de7617fd026490164271f3792603327fe251f3b4165980b30564d6a981e2
-
SHA512
d48c25d200419bf50d80d164d443452a0a05d56aaa5da3bb58b3db15c04afa5d3a9b6c78ca872fe3828d08cc60b3f2c7d4cb71008abc7f6c6ee0e74c46db7ac7
-
SSDEEP
3072:suDeambp515fNW4T4MnOCqb9knnL4Yo2V:VDj2p5DfkBGOCqbKLWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8cc7de7617fd026490164271f3792603327fe251f3b4165980b30564d6a981e2.exe
Files
-
8cc7de7617fd026490164271f3792603327fe251f3b4165980b30564d6a981e2.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ