Static task
static1
Behavioral task
behavioral1
Sample
9f593ada94ac2d793fe144be49476c808722f30fe3b6aeff4d2c316ed43cb14aN.dll
Resource
win7-20240903-en
General
-
Target
9f593ada94ac2d793fe144be49476c808722f30fe3b6aeff4d2c316ed43cb14aN.exe
-
Size
120KB
-
MD5
3acab51e7877c5457ac68e06a71d8f50
-
SHA1
6728d987ad33f7233e393541b2f92538b28e0e87
-
SHA256
9f593ada94ac2d793fe144be49476c808722f30fe3b6aeff4d2c316ed43cb14a
-
SHA512
b0f08296bba76a24913e24efa59ed281a28595f78b5a1070cb7dca8ce4894f34d490bcfb051e1a4891d27d623b1bb54c71f5fdd7d44ae88669df69b08fe19dd9
-
SSDEEP
3072:Oj5TxaD/AqqKpA/rnkVCt47/8syLQn0l4:uS/XeTqe47/8F7l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9f593ada94ac2d793fe144be49476c808722f30fe3b6aeff4d2c316ed43cb14aN.exe
Files
-
9f593ada94ac2d793fe144be49476c808722f30fe3b6aeff4d2c316ed43cb14aN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ