Static task
static1
Behavioral task
behavioral1
Sample
a45ab5dba6d3bed2fd0b5eaf216c8b79.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
a45ab5dba6d3bed2fd0b5eaf216c8b79.exe
Resource
win10v2004-20230915-en
General
-
Target
a45ab5dba6d3bed2fd0b5eaf216c8b79.bin
-
Size
7KB
-
MD5
a45ab5dba6d3bed2fd0b5eaf216c8b79
-
SHA1
0832906c2d752dc7f7634fbf582f453d7d32a572
-
SHA256
ff0014a457bf7d7069de8527f782750ed668abdb731cb35c57134aa0b9d1dd75
-
SHA512
f96ca33623fdf19f1d58100a5be4893fa72e02658db0447e050d9a3eb695f2f92c5c60efd3d00e956b7650152f71244c8694fd56d7ee19fef9699a159be71785
-
SSDEEP
24:eFGStrJ9u0/6eIkY/nZd0BQAVozcXhgDkTtZMmsDbSUWzNqrymZOpspmB:is0DhYb0BQFAhg+fsbWzNsJO5B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a45ab5dba6d3bed2fd0b5eaf216c8b79.bin
Files
-
a45ab5dba6d3bed2fd0b5eaf216c8b79.bin.exe windows:4 windows x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.esum Size: 1024B - Virtual size: 784B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE