Static task
static1
Behavioral task
behavioral1
Sample
d09f9a77358ae48847187f7480a1491bf21da860d0426caa38e5481a86286c9eN.dll
Resource
win7-20240903-en
General
-
Target
d09f9a77358ae48847187f7480a1491bf21da860d0426caa38e5481a86286c9eN.exe
-
Size
120KB
-
MD5
8e3c24b6764a6d39ba21ed6994de1d30
-
SHA1
2ec15db0cc8799160eabceb4a12b8da246357deb
-
SHA256
d09f9a77358ae48847187f7480a1491bf21da860d0426caa38e5481a86286c9e
-
SHA512
1fe132146416b83b48562e19bbbcf8b8c3c91ec788b4b01020725b8a348d76cc8a696e1630d3bed82d4859a8cd1e89527b68db2cf88a78fbf99149a423f3373e
-
SSDEEP
1536:Kf/Wj6Ja0xSdsrZDlqzm6fudKfTusbKTCkDdkybW7eTUmfkJg7M1Ygd2/eNOove:Kf/WxYZpsmo//bKGkDGQW2pfYygEeDe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d09f9a77358ae48847187f7480a1491bf21da860d0426caa38e5481a86286c9eN.exe
Files
-
d09f9a77358ae48847187f7480a1491bf21da860d0426caa38e5481a86286c9eN.exe.dll windows:4 windows x86 arch:x86
0f44bf2b3b0b8d5ecae5689ff1d0e90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode
user32
wsprintfA
Sections
.text Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ