Static task
static1
Behavioral task
behavioral1
Sample
7141ad9dede7752837731bbd6c5d4d8e16f4d4ad8cb517a39dbdf1df47cd1a24N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
7141ad9dede7752837731bbd6c5d4d8e16f4d4ad8cb517a39dbdf1df47cd1a24N.exe
Resource
win10v2004-20241007-en
General
-
Target
7141ad9dede7752837731bbd6c5d4d8e16f4d4ad8cb517a39dbdf1df47cd1a24N.exe
-
Size
134KB
-
MD5
6e1f8a2094469820b5485f063fb45200
-
SHA1
d2c0ab833a24f278afae264ced9ec66a135f1420
-
SHA256
7141ad9dede7752837731bbd6c5d4d8e16f4d4ad8cb517a39dbdf1df47cd1a24
-
SHA512
0db5f4ad9e05cb2bc89de7633de35b6793fcf629dc1e15c6e5af23494f7330fa99b9fa61a151cc834b24d721a1a99454de18deea1f4d2b0efd70ba9712167413
-
SSDEEP
1536:2XOAqenssH9SlVUPHlo9i7EBsjQkGZ6Qb21DNhviYkp9Zwejj5dEqtXdMdM1xW0:eOmCz9QE2QSbQ1XBk03IikI7X32jS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7141ad9dede7752837731bbd6c5d4d8e16f4d4ad8cb517a39dbdf1df47cd1a24N.exe
Files
-
7141ad9dede7752837731bbd6c5d4d8e16f4d4ad8cb517a39dbdf1df47cd1a24N.exe.exe windows:5 windows x86 arch:x86
8614775ce11ef5c4a83ebfef27912b7d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapDestroy
ClearCommBreak
LoadLibraryA
GetPrivateProfileIntW
HeapFree
GetFileAttributesA
GetCurrentProcess
VirtualProtectEx
ResumeThread
GetPrivateProfileSectionA
DeleteFileA
TlsGetValue
CreateEventW
DeviceIoControl
lstrlenA
CancelIo
GetDriveTypeA
GetStringTypeA
DeviceIoControl
OpenMutexA
GetTickCount
uxtheme
GetThemeSysSize
SetWindowTheme
CloseThemeData
GetThemeTextExtent
OpenThemeData
DrawThemeBackground
DrawThemeEdge
GetThemeTextMetrics
CloseThemeData
GetThemeColor
GetThemeBool
GetWindowTheme
IsThemeActive
odbctrac
TraceSQLAllocConnect
TraceSQLBindCol
TraceSQLAllocEnv
TraceSQLAllocStmt
msasn1
ASN1BERDecBool
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ