Static task
static1
Behavioral task
behavioral1
Sample
512bc6701aeeec677597bb773f59eb4504d424947f4392fa9338285f292f58dfN.dll
Resource
win7-20240903-en
General
-
Target
512bc6701aeeec677597bb773f59eb4504d424947f4392fa9338285f292f58dfN.exe
-
Size
120KB
-
MD5
1a03f47b50f4ac275a98406ef27c8400
-
SHA1
41a3534a04be7bb112d33f3a31f3cb2caf51a73d
-
SHA256
512bc6701aeeec677597bb773f59eb4504d424947f4392fa9338285f292f58df
-
SHA512
00cf9d4419268b75427471dd50bb559908980548ff25a31848c79078092b8d92f4cecdb968819e4285d4a38c560e86af0eeb6994e75aa3e43fccc98aa6b3a06e
-
SSDEEP
1536:qIiI09MI8eRjlw0DG1/Fw8XjDeJHV7g1lM0SL6Ek0UTKL0cr:10Tdplw0V8XN70w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 512bc6701aeeec677597bb773f59eb4504d424947f4392fa9338285f292f58dfN.exe
Files
-
512bc6701aeeec677597bb773f59eb4504d424947f4392fa9338285f292f58dfN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ