Static task
static1
Behavioral task
behavioral1
Sample
d3898dfc53886208546e4943a7025053aef455cb09a11267401c40a898128a3dN.dll
Resource
win7-20241010-en
General
-
Target
d3898dfc53886208546e4943a7025053aef455cb09a11267401c40a898128a3dN.exe
-
Size
120KB
-
MD5
b67552ae5832ae452ba6c367580b3b80
-
SHA1
33f6ac6be121f34d7e1f23a18a9dcfdddf2b9c97
-
SHA256
d3898dfc53886208546e4943a7025053aef455cb09a11267401c40a898128a3d
-
SHA512
2d2908ef9c2bbf6d81f6ecabaadbd6888c549b5c79c7f2899b13e41eb1e1ab381d7cec7d4a4cdfcdf29465b4abd54d8b4bbc31f47475104fcc6265eb2946ecdc
-
SSDEEP
3072:SMsyq2ae8W67cw36kTI5ODYmST+y0CxSfwNpv+Y:Sl2ae8mg6kTtV4+ywyV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3898dfc53886208546e4943a7025053aef455cb09a11267401c40a898128a3dN.exe
Files
-
d3898dfc53886208546e4943a7025053aef455cb09a11267401c40a898128a3dN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ