Static task
static1
Behavioral task
behavioral1
Sample
24a3f30854d06886c9ebaa0eda8b8f1100c9e7652abd76a5e912020e0867de90N.dll
Resource
win7-20240903-en
General
-
Target
24a3f30854d06886c9ebaa0eda8b8f1100c9e7652abd76a5e912020e0867de90N.exe
-
Size
120KB
-
MD5
67d894fb922a8e4b0060d8cf57b48aa0
-
SHA1
ebec197b12651f6e18079866e5157163adcdec69
-
SHA256
24a3f30854d06886c9ebaa0eda8b8f1100c9e7652abd76a5e912020e0867de90
-
SHA512
607851de6d9294ac261f5a6a9aa72ec7aedc42056c97ee4c767392ce6912d7cd37e921aa1a15689c726e6ffe5341245ff657248bc9693fb2cb3dc49c2ffbc3eb
-
SSDEEP
3072:B53XHzYwtgP+BXITX17SjgtmA+ebJAaxG7Dbu5:nYiNG1qqtBwXe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24a3f30854d06886c9ebaa0eda8b8f1100c9e7652abd76a5e912020e0867de90N.exe
Files
-
24a3f30854d06886c9ebaa0eda8b8f1100c9e7652abd76a5e912020e0867de90N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ