Static task
static1
Behavioral task
behavioral1
Sample
4d1f990c4468cdb0864ec3967a9f1f98432b35066cfbbde8514c52a3f5d63075N.dll
Resource
win7-20240903-en
General
-
Target
4d1f990c4468cdb0864ec3967a9f1f98432b35066cfbbde8514c52a3f5d63075N.exe
-
Size
120KB
-
MD5
8e5ec00cc5b6f32d95bc647497f90560
-
SHA1
33db8f3a3997d4d608aaa49c95e404efb380f1f4
-
SHA256
4d1f990c4468cdb0864ec3967a9f1f98432b35066cfbbde8514c52a3f5d63075
-
SHA512
35dbe976475ad31aa63efadcdbeaa471f34c730b10f359dfebc57d3af43654e3a27295528b64714480b9e732bbea7ec980eacb31f608c9689caac07ddb4e2aa6
-
SSDEEP
3072:wm2CmkmaM/dxgc7GAujHMSe/w1NdW0lG:wmAtv/doFj8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d1f990c4468cdb0864ec3967a9f1f98432b35066cfbbde8514c52a3f5d63075N.exe
Files
-
4d1f990c4468cdb0864ec3967a9f1f98432b35066cfbbde8514c52a3f5d63075N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ