Static task
static1
Behavioral task
behavioral1
Sample
d95ffeef2ee17cb3cffa686965abe0f6952c6114a5e32dc9608f599173d19b33.dll
Resource
win7-20241010-en
General
-
Target
d95ffeef2ee17cb3cffa686965abe0f6952c6114a5e32dc9608f599173d19b33.exe
-
Size
120KB
-
MD5
af3bd7b9ed9f66a45b296153b063744b
-
SHA1
1c9c0df877f9e1db328a937ba0af04a7df2647a5
-
SHA256
d95ffeef2ee17cb3cffa686965abe0f6952c6114a5e32dc9608f599173d19b33
-
SHA512
88595b4afda5b1a8f367efbfefe2568fc1b4b517dadf3e3be651fb0b00dba8ee81c26eed128dc4c59e8ac84e4f6e2edc255821c34a4a99301729818e51bb95ef
-
SSDEEP
1536:Kb0z4LBLw+XWZV5AAsjEZDEQIJa6Q2lo9tsjofkp9VQPf+kkwc4L/iSzkZsE8:Kb9w++V5+QIPQmoXtw9VWf+JqDB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d95ffeef2ee17cb3cffa686965abe0f6952c6114a5e32dc9608f599173d19b33.exe
Files
-
d95ffeef2ee17cb3cffa686965abe0f6952c6114a5e32dc9608f599173d19b33.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ