Static task
static1
Behavioral task
behavioral1
Sample
087db49a267d4f50050fafd600ad8481.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
087db49a267d4f50050fafd600ad8481.exe
Resource
win10v2004-20231215-en
General
-
Target
087db49a267d4f50050fafd600ad8481
-
Size
179KB
-
MD5
087db49a267d4f50050fafd600ad8481
-
SHA1
2806cbcf0b3bb0f8fb1fd98c8f6dc2cb4f68d8cf
-
SHA256
c52ceb2c54b20f73d39fd7f235ce5dcafbfc1fc858915287f41ca7f85eb3b027
-
SHA512
df30aa367bbdf5d6f4c145f9f8ea031ece6f3f9b6804d47abb732a4eea7cdcbec81a30dbd0041765aef1e198731f468cd55bd50ee4c2538328195b4c185b9239
-
SSDEEP
3072:IFmxsczyRrAO75U+31DjsAZ8yTyZMCAeABPhyPoJz//hMhfWCMHYHZpsoOFL7jcr:IQ2RrAO7zBjsAjTyZMCAeABPuyznkbM2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 087db49a267d4f50050fafd600ad8481
Files
-
087db49a267d4f50050fafd600ad8481.exe windows:5 windows x86 arch:x86
f020e1a2feae651f7ce88318f285b500
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
shell32
ShellExecuteW
ws2_32
WSAStartup
Sections
UJHFFTRT Size: - Virtual size: 580KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UJHFFTRT Size: 178KB - Virtual size: 180KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE