Static task
static1
Behavioral task
behavioral1
Sample
fad0ec86598c59e9540491696db970b0134a54f7509181e679f37347757ab683N.dll
Resource
win7-20241010-en
General
-
Target
fad0ec86598c59e9540491696db970b0134a54f7509181e679f37347757ab683N.exe
-
Size
120KB
-
MD5
7879ea90c74c61049439135607bdddf0
-
SHA1
0904693e566d3214c70a45b687f283e54cff5faf
-
SHA256
fad0ec86598c59e9540491696db970b0134a54f7509181e679f37347757ab683
-
SHA512
98e2582d51df0da5e345260a487f64a941c40469d4cab8210e0d48520579027e03cc005d8a14b8c738f993cd5cc50035b12601aee5e12eee0711cc26568939e2
-
SSDEEP
1536:cx9sbI8gPN/ON9rNZ9gQIn/NrF/uc6zFuAHK4JTFOvQQRhvIOSW0iYsaPVa1/xpS:cnssPZOz9gDn/ec+/JQvQQRViVuuMeR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad0ec86598c59e9540491696db970b0134a54f7509181e679f37347757ab683N.exe
Files
-
fad0ec86598c59e9540491696db970b0134a54f7509181e679f37347757ab683N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ