Static task
static1
Behavioral task
behavioral1
Sample
087d711df5110e075463bf78fd1d88839b95ad1b5e532f331df525c211700250N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
087d711df5110e075463bf78fd1d88839b95ad1b5e532f331df525c211700250N.exe
Resource
win10v2004-20241007-en
General
-
Target
087d711df5110e075463bf78fd1d88839b95ad1b5e532f331df525c211700250N.exe
-
Size
302KB
-
MD5
320f7fd6be5cbe8669f9515d51260900
-
SHA1
1f6d24e80c248e7924a14fec40bd3dac39bfd03a
-
SHA256
087d711df5110e075463bf78fd1d88839b95ad1b5e532f331df525c211700250
-
SHA512
b6ae3945fd9e8139f9f0bd6900d545a9b9b4ee76624c0b1f2ce48f63fc1c953d707e71a3f4d7acb9e477ac1aba15c5ae648cc3cc23329bffb696d466052f6e40
-
SSDEEP
6144:K9d2UEsvUo+/+33MyPsaoyY2eHlaNOIyltCWhkcyPfF:2yYR+c30MYnHthqHF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087d711df5110e075463bf78fd1d88839b95ad1b5e532f331df525c211700250N.exe
Files
-
087d711df5110e075463bf78fd1d88839b95ad1b5e532f331df525c211700250N.exe.exe windows:4 windows x86 arch:x86
9fd655e51f78bb96dbb09d8051830972
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
RtlUnwind
GetCommandLineA
GetVersionExA
RaiseException
HeapFree
HeapAlloc
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
GetLastError
LCMapStringW
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
VirtualAlloc
HeapReAlloc
FlushFileBuffers
SetFilePointer
CloseHandle
HeapSize
VirtualProtect
GetSystemInfo
VirtualQuery
LoadLibraryA
InterlockedExchange
GetACP
GetOEMCP
SetStdHandle
ReadFile
GetLocaleInfoW
Sections
.text Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE