Static task
static1
Behavioral task
behavioral1
Sample
a0a4e84ad5bc28cf7d5eb146c15bca2733721a388a2ce3d6fa60b3f01ca5f602N.exe
Resource
win7-20240903-en
General
-
Target
a0a4e84ad5bc28cf7d5eb146c15bca2733721a388a2ce3d6fa60b3f01ca5f602N.exe
-
Size
53KB
-
MD5
d1598e9c1a4ee205709f43dbdb065360
-
SHA1
0f0ec83d7f60bfcc3bc203c0cc35d48fd6c90fc5
-
SHA256
a0a4e84ad5bc28cf7d5eb146c15bca2733721a388a2ce3d6fa60b3f01ca5f602
-
SHA512
248466e2c9f93495223e73d5164c60865b9b1e91543ca920a2c8833bcceb33ea161f75bb2eaf8f9612d6e785b1f5d3f3ad9cd4da42dc163073d99d7832ccd2a3
-
SSDEEP
1536:mAocdpeVoBDulhzHMb7xNAa04Mcg5IKvlG:0cdpeeBSHHMHLf9RyI7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0a4e84ad5bc28cf7d5eb146c15bca2733721a388a2ce3d6fa60b3f01ca5f602N.exe
Files
-
a0a4e84ad5bc28cf7d5eb146c15bca2733721a388a2ce3d6fa60b3f01ca5f602N.exe.exe windows:4 windows x86 arch:x86
9dacd5fc505421be83fd9ef325d44b59
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
atoi
shlwapi
PathFileExistsA
user32
wsprintfA
Sections
.MPRESS1 Size: 39KB - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE