Static task
static1
Behavioral task
behavioral1
Sample
2625118880fa0a274e3647d40a8a17fee49bbe01a6ae8c444e4b4aa789d4d88eN.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2625118880fa0a274e3647d40a8a17fee49bbe01a6ae8c444e4b4aa789d4d88eN.exe
Resource
win10v2004-20241007-en
General
-
Target
2625118880fa0a274e3647d40a8a17fee49bbe01a6ae8c444e4b4aa789d4d88eN.exe
-
Size
272KB
-
MD5
cf7c5f8523446c33cc27330492313e50
-
SHA1
df91c2b5aebaed460065cc0a78f92cc2fb8d1490
-
SHA256
2625118880fa0a274e3647d40a8a17fee49bbe01a6ae8c444e4b4aa789d4d88e
-
SHA512
720ea22534d52a5e5989786baf959123105f99b96a0c1619a1bea1b9f9259773969a55006e81f449a34347bb19a48e0b584409ebb5c849c57b2576b19ad32843
-
SSDEEP
6144:luupvQP0sP7wBfndGZ/1+UcJ0oVzQ6OCn9IAuE6eGni+FjpyObkF:3I06kBf2/11cJ3xO6UE6eSiqlVwF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2625118880fa0a274e3647d40a8a17fee49bbe01a6ae8c444e4b4aa789d4d88eN.exe
Files
-
2625118880fa0a274e3647d40a8a17fee49bbe01a6ae8c444e4b4aa789d4d88eN.exe.exe windows:4 windows x86 arch:x86
b050d59ca7c08b4e1c516a2bcebd8854
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenW
GlobalGetAtomNameA
Sleep
GetTickCount
LoadLibraryW
GetPrivateProfileStringW
GetModuleFileNameW
GetPrivateProfileIntW
InitializeCriticalSection
MulDiv
GetVersionExA
GetVersionExW
GetProcAddress
LockResource
EnumResourceTypesW
FindFirstFileW
FreeLibrary
DeleteCriticalSection
GlobalSize
LoadLibraryA
GetModuleHandleW
IsDBCSLeadByteEx
FindClose
WritePrivateProfileStringW
LoadResource
MultiByteToWideChar
GetLocaleInfoW
shell32
DllGetVersion
ShellExecuteExA
SHFileOperationW
ShellExecuteExW
SHGetFileInfoA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
Shell_NotifyIconA
wininet
InternetReadFile
HttpSendRequestA
InternetOpenA
InternetCrackUrlA
InternetCloseHandle
InternetTimeToSystemTime
InternetConnectA
HttpQueryInfoA
HttpOpenRequestA
InternetErrorDlg
InternetTimeFromSystemTime
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ