Static task
static1
Behavioral task
behavioral1
Sample
64d979e8d080930c679f5f253906fea2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64d979e8d080930c679f5f253906fea2.exe
Resource
win10v2004-20231215-en
General
-
Target
64d979e8d080930c679f5f253906fea2
-
Size
59KB
-
MD5
64d979e8d080930c679f5f253906fea2
-
SHA1
42752311483f46bc64b45dec3fa799208464583a
-
SHA256
53ed5cdc5e1a2b3548530f5ba1fc0ac7702fa5698fea7c6c202b7e62c5b37678
-
SHA512
b7fe4717d05f5ca88e835b91eec3d9b69f4f8b3a946a3d7cfb5c068e8a90d4a65ab975ea67dec58089aaabe51998ea5ccdf1094f681f649c35243a7b81792106
-
SSDEEP
1536:C3ujbmXYVXtIGp67mi98qwiLuo+xQRiAtEzKXB:C3ujbIYhtIO67mi98qwiL3gQRdcKx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d979e8d080930c679f5f253906fea2
Files
-
64d979e8d080930c679f5f253906fea2.exe windows:6 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
kkrunchy Size: 55KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE