Static task
static1
Behavioral task
behavioral1
Sample
c995247cac17f9660c0edf9645c05c50_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c995247cac17f9660c0edf9645c05c50_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
c995247cac17f9660c0edf9645c05c50_exe32.exe
-
Size
68KB
-
MD5
c995247cac17f9660c0edf9645c05c50
-
SHA1
deb8a05c80405d9b6d3ceb77748e16d2309d6e40
-
SHA256
84fa927b5c8301bbd704b04fd1b81b9aaa12b6c4fa2e7ea258b9e72f62a97496
-
SHA512
9b8c45217f108dcae599f6fb384337e685da6f40a2dd0af50363732a239d89d608fdd3b3898deb6d733e9c717482ef1b7ebc9a772bbb3f00063188362d87b6d0
-
SSDEEP
768:YLonByjugARIqN7JD3iQ3LJHhhKEnHqYU420d8f2N:YIHgQIqNVx3LJjn351eA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c995247cac17f9660c0edf9645c05c50_exe32.exe
Files
-
c995247cac17f9660c0edf9645c05c50_exe32.exe.exe windows:5 windows x86
a624b58551b12248f78b62ae51484114
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
ShowWindow
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
UpdateWindow
PostMessageA
kernel32
FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetSystemTime
GetModuleHandleW
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ