Static task
static1
Behavioral task
behavioral1
Sample
030778ea20462a1009ad30c373b3939f635fcc6f435c565fedbc6c98b39be1c8N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
030778ea20462a1009ad30c373b3939f635fcc6f435c565fedbc6c98b39be1c8N.exe
Resource
win10v2004-20241007-en
General
-
Target
030778ea20462a1009ad30c373b3939f635fcc6f435c565fedbc6c98b39be1c8N.exe
-
Size
120KB
-
MD5
7878e2df2dade7e8ffaf2afa98d40a00
-
SHA1
f3fab8dacd6c31f44fdb0acfed76bd9ac1923ec8
-
SHA256
030778ea20462a1009ad30c373b3939f635fcc6f435c565fedbc6c98b39be1c8
-
SHA512
5ef20f9aafe7669cd6c90776d6d39cd853f7804f2d114856661d2de443423d7ec280ce158606b24bf2db6fa17d778f6e69e1a5a589d03862471624337c1bd6cc
-
SSDEEP
3072:GIDU3z73/LxF31wAf/px5ibGWjPcLqdl6DFZtZPz:uz/q2/povjPnwNZb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 030778ea20462a1009ad30c373b3939f635fcc6f435c565fedbc6c98b39be1c8N.exe
Files
-
030778ea20462a1009ad30c373b3939f635fcc6f435c565fedbc6c98b39be1c8N.exe.exe windows:4 windows x86 arch:x86
483117b9381fca257d4bbadeed80312f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceA
ReadFile
GetModuleHandleA
GetFileSize
GetCurrentDirectoryW
IsBadWritePtr
SetFileTime
GetStartupInfoW
SetFileTime
GetLastError
CreateMutexW
CloseHandle
SetFileAttributesW
InitializeCriticalSection
GetLocalTime
lstrcatA
LeaveCriticalSection
SetFileTime
lstrcpyA
HeapCreate
FormatMessageW
msi
MsiAdvertiseProductA
MsiCloseAllHandles
MsiCreateRecord
MsiCloseHandle
user32
PostMessageW
wsprintfW
PeekMessageW
IsWindow
GetWindowLongW
DispatchMessageA
IsDialogMessageA
LoadCursorW
GetWindowTextA
IsZoomed
SetFocus
GetWindowRect
SetCursorPos
wldap32
ldap_add
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 1024B - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE