Static task
static1
Behavioral task
behavioral1
Sample
63e853ade8bc73ea13b70f21d74395d32a06595918800cf9f465d6b3b3bd0219.dll
Resource
win7-20240903-en
General
-
Target
63e853ade8bc73ea13b70f21d74395d32a06595918800cf9f465d6b3b3bd0219.exe
-
Size
120KB
-
MD5
06e49e6ad5a847b8602370d4504dea7c
-
SHA1
b9380127dd0aab0a92816794d35581ff147e478f
-
SHA256
63e853ade8bc73ea13b70f21d74395d32a06595918800cf9f465d6b3b3bd0219
-
SHA512
8a3f3e94a991a8ae7bcf1854650a4ff914326aaa98f4c85f2c90bb1c40f63a9846aae749f23519f221edbbd9aa6471188ffd7e729669e3a54180b279b1481ee2
-
SSDEEP
1536:1Y1FiVBfFMD2t24xhavYudheWgGQiO5BmnuoXbq+B608yP0tVCcBy+o2:1CFyB9MShkve3mnuorq+i2iPBy+o2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63e853ade8bc73ea13b70f21d74395d32a06595918800cf9f465d6b3b3bd0219.exe
Files
-
63e853ade8bc73ea13b70f21d74395d32a06595918800cf9f465d6b3b3bd0219.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ