Static task
static1
Behavioral task
behavioral1
Sample
0c394ebede826f663c6d51f13fb45dae093d81b57858dd3166b7cbb67954ca15N.dll
Resource
win7-20240903-en
General
-
Target
0c394ebede826f663c6d51f13fb45dae093d81b57858dd3166b7cbb67954ca15N.exe
-
Size
120KB
-
MD5
18ec33ce30cb6fac98df750075936300
-
SHA1
bc6491a3aad4942b734f23d7d5719c5b66af7609
-
SHA256
0c394ebede826f663c6d51f13fb45dae093d81b57858dd3166b7cbb67954ca15
-
SHA512
5b13ad1f70788a6fc96615a0d803d20769d6a8fbb834c209e43722e7c503767023e2e2c3f7263c5136c664a711c343c0716776e9f0a463cee0d108fcfc2daede
-
SSDEEP
1536:kyR53zD1Z+wSCuaYArPtdf+6AgsrXbm4lKbpR77t1KvA4R6q78rw1bWxIkOXlD:dt+w11hrVdrrID81R/tQTR6qPkcD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c394ebede826f663c6d51f13fb45dae093d81b57858dd3166b7cbb67954ca15N.exe
Files
-
0c394ebede826f663c6d51f13fb45dae093d81b57858dd3166b7cbb67954ca15N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ