Static task
static1
Behavioral task
behavioral1
Sample
fdf0e5b020cd294e97e5c983c84c742428cc1071684d23e6a6e8c9d0c66e4b28N.dll
Resource
win7-20240903-en
General
-
Target
fdf0e5b020cd294e97e5c983c84c742428cc1071684d23e6a6e8c9d0c66e4b28N.exe
-
Size
120KB
-
MD5
c59671ec62f385ed57472752b4544a00
-
SHA1
5a3222912561c89bbb05c99ab0260babeab96c9d
-
SHA256
fdf0e5b020cd294e97e5c983c84c742428cc1071684d23e6a6e8c9d0c66e4b28
-
SHA512
c94faa92d8194e6b0cd44e0eb89803e6a07c50dc2cafc4aaae6db67de540a819d5957a807d366ac98aba3bfc0406b6eb8ba39c8e4ffd3033ccc74991f3fe76db
-
SSDEEP
3072:1VaQc7YLD0OHwM2mq349baISXXaRT+5oWj:s4AOHwMW34ZI+YoW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fdf0e5b020cd294e97e5c983c84c742428cc1071684d23e6a6e8c9d0c66e4b28N.exe
Files
-
fdf0e5b020cd294e97e5c983c84c742428cc1071684d23e6a6e8c9d0c66e4b28N.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ