Static task
static1
Behavioral task
behavioral1
Sample
682021990e92bdb9e268a66724d674686fafbfec4915a1abb4c9023f3ba03ecaN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
682021990e92bdb9e268a66724d674686fafbfec4915a1abb4c9023f3ba03ecaN.exe
Resource
win10v2004-20241007-en
General
-
Target
682021990e92bdb9e268a66724d674686fafbfec4915a1abb4c9023f3ba03ecaN.exe
-
Size
119KB
-
MD5
78c69a331e6e5b1c2afed9618a78eae0
-
SHA1
b49a63769fc2fa25d084bd5dbd7c9b018df13194
-
SHA256
682021990e92bdb9e268a66724d674686fafbfec4915a1abb4c9023f3ba03eca
-
SHA512
345e1a484a0f7d2d8c02b66efc3c04af202372b799babd51d7267df9177921c7db394ec1a21099a6d5ad361a2c8322113199b59658d541d2c4b0a0dafcec0d97
-
SSDEEP
3072:ReCwIyLskoVuv3BFUeTjc4fNzy49URULDs8e6:koc5eSjcww49FLs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 682021990e92bdb9e268a66724d674686fafbfec4915a1abb4c9023f3ba03ecaN.exe
Files
-
682021990e92bdb9e268a66724d674686fafbfec4915a1abb4c9023f3ba03ecaN.exe.exe windows:4 windows x86 arch:x86
d90b48a024eab1320ea0d4f7bc2b4f4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapCreate
GetLastError
InitializeCriticalSection
lstrcatA
ReadConsoleA
GetLocalTime
lstrcpyA
FindResourceA
GetStartupInfoW
ReadConsoleA
GetFileSize
LeaveCriticalSection
SetFileAttributesA
GetModuleHandleA
FormatMessageA
ReadConsoleA
ReadFile
CreateMutexA
GetCurrentDirectoryW
CloseHandle
IsBadStringPtrW
msi
MsiCreateRecord
MsiCloseAllHandles
MsiAdvertiseProductA
MsiCloseHandle
user32
IsZoomed
IsCharLowerA
DispatchMessageA
IsWindow
PostMessageW
GetWindowLongW
SetCursorPos
SetFocus
PeekMessageW
GetWindowTextA
LoadCursorW
wsprintfW
IsDialogMessageA
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text1 Size: 1024B - Virtual size: 263B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE