Static task
static1
Behavioral task
behavioral1
Sample
471ce6fdbe91230112f108c5be1349970c5a7c0fb9a741cc8a6809a1fb4c9d8e.dll
Resource
win7-20240903-en
General
-
Target
471ce6fdbe91230112f108c5be1349970c5a7c0fb9a741cc8a6809a1fb4c9d8e.exe
-
Size
120KB
-
MD5
fdaf87b763ad4f035fef4fcaf3fca9cc
-
SHA1
cdfd086785eeb775349844f827a341872487aa02
-
SHA256
471ce6fdbe91230112f108c5be1349970c5a7c0fb9a741cc8a6809a1fb4c9d8e
-
SHA512
d0c720689f567343a4105c68aa5fd3aedf95f5ca6b1eaa53b46ff99c478fc10c7cc9ee1fa00f98eb414ea080366b9f080529eab0e00dc50da38edd2ed32da18e
-
SSDEEP
1536:sqv1knXGX3UXTYHd3f55u6w3zsXORcqPRPvzU+bhpCYMH1pBsyYxVWpdINzpz:RHX3SS7wjsijFvztq7VpBsyYxVc6F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 471ce6fdbe91230112f108c5be1349970c5a7c0fb9a741cc8a6809a1fb4c9d8e.exe
Files
-
471ce6fdbe91230112f108c5be1349970c5a7c0fb9a741cc8a6809a1fb4c9d8e.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ