Static task
static1
Behavioral task
behavioral1
Sample
510500eb1a69670ba9c559034a9571d6d9c907514b846baff52d64873ddacbba.dll
Resource
win7-20241010-en
General
-
Target
510500eb1a69670ba9c559034a9571d6d9c907514b846baff52d64873ddacbba.exe
-
Size
120KB
-
MD5
cb62c5c9747c4eaf9bab2a56b72f0e26
-
SHA1
50da85d216295635f70e56d6024ad826747811ad
-
SHA256
510500eb1a69670ba9c559034a9571d6d9c907514b846baff52d64873ddacbba
-
SHA512
3708afd13c83528c07e4eb6fdc2ef3ef6f2725c419c4c9e314baa8db38878bda944a075f700d85ed35474d1785f4dc477f07ff4387bc99ab3ba1c8ec25f940ac
-
SSDEEP
1536:jNbQoxG1yQAVrvenhJ+VJL/nL+hyzL8Nw1cT4DePwmSLGneQqfOs:jNcEG1Mrv4hJStL+hyX8i8PwmSL8qGs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 510500eb1a69670ba9c559034a9571d6d9c907514b846baff52d64873ddacbba.exe
Files
-
510500eb1a69670ba9c559034a9571d6d9c907514b846baff52d64873ddacbba.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ