Static task
static1
Behavioral task
behavioral1
Sample
86cf72d078a5456339b5bba9a2158a4f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
86cf72d078a5456339b5bba9a2158a4f.exe
Resource
win10v2004-20231215-en
General
-
Target
86cf72d078a5456339b5bba9a2158a4f
-
Size
195KB
-
MD5
86cf72d078a5456339b5bba9a2158a4f
-
SHA1
c0098c9c277a253d11f88d6e219c9be50519e211
-
SHA256
3aa810b8ed599a837fe0657951462777b788ade7d32f5cc10ac0fe8da26062ba
-
SHA512
ac526e0d0b40be16a776045220aafcd30aa7b7253f3b289c88e6b4d84c48a98bcb984abe73f93dbdad8b86f99f0d8c139d1045a32832f156ffe2ddc7ff44d186
-
SSDEEP
3072:E000mBDN+Uf0BgXjwHF64WnkaZSRpwG3IQuHeHE7prGVGj1uWGqooa:M0md+GXjg67nkaZSRpjuHeHG5GVyGqo1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 86cf72d078a5456339b5bba9a2158a4f
Files
-
86cf72d078a5456339b5bba9a2158a4f.exe windows:4 windows x86 arch:x86
1e82ec68160bd8fb2faf76c8dc0232f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadIconA
msvcrt
_exit
advapi32
RegOpenKeyA
Sections
. Size: 142KB - Virtual size: 360KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE