Static task
static1
Behavioral task
behavioral1
Sample
ee83ecada5a980488b223caaa9c6c56666ca78986d44b46e68abfcfd156f8b5cN.dll
Resource
win7-20240729-en
General
-
Target
ee83ecada5a980488b223caaa9c6c56666ca78986d44b46e68abfcfd156f8b5cN.exe
-
Size
120KB
-
MD5
843c2e02254dc094a2fb510d49377b90
-
SHA1
478bb7a95b830343f854d86ebb8785d8fd7091e8
-
SHA256
ee83ecada5a980488b223caaa9c6c56666ca78986d44b46e68abfcfd156f8b5c
-
SHA512
c9018916c69f5a2e89e0bdfd877fd1c32296a21bef683addb10babc1bf55f9256d7f9127a8a9411b2eece2d379cadc40679073c2428d4a60026de3000b8a5eab
-
SSDEEP
3072:XlpT5umzys22RT2a71E2p2QND9I3B5YT:XJw2RT2ZglJI3B5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ee83ecada5a980488b223caaa9c6c56666ca78986d44b46e68abfcfd156f8b5cN.exe
Files
-
ee83ecada5a980488b223caaa9c6c56666ca78986d44b46e68abfcfd156f8b5cN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ