Static task
static1
Behavioral task
behavioral1
Sample
006f32bb212509e7dbf8ba6db959d854c77571acdc143b4fc1018564a3a2933cN.dll
Resource
win7-20240903-en
General
-
Target
006f32bb212509e7dbf8ba6db959d854c77571acdc143b4fc1018564a3a2933cN.exe
-
Size
120KB
-
MD5
29ba3a8632df23709ffa81806af34dc0
-
SHA1
9c88d9b48c08bf0a45dbde821e1fe22f9e6e8ae9
-
SHA256
006f32bb212509e7dbf8ba6db959d854c77571acdc143b4fc1018564a3a2933c
-
SHA512
eafedc574b5aa9cf36564aefa4c389e3bae2025f66445dc27414282c2144caf74816bbb88638051fa4db6bcc278751455b55628596b38d62ed3f588fe0f4cdb6
-
SSDEEP
1536:B6+rRG6gWmiSBW1004mo9f2hro5gpvrphYMvBJti/Vjgpx9p6f:BtdDgRc1004pGro5uvr3Y6B6/ls4f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 006f32bb212509e7dbf8ba6db959d854c77571acdc143b4fc1018564a3a2933cN.exe
Files
-
006f32bb212509e7dbf8ba6db959d854c77571acdc143b4fc1018564a3a2933cN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ