Static task
static1
Behavioral task
behavioral1
Sample
141118ef703f1da8886ed69570b2863d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
141118ef703f1da8886ed69570b2863d.exe
Resource
win10v2004-20231222-en
General
-
Target
141118ef703f1da8886ed69570b2863d
-
Size
17KB
-
MD5
141118ef703f1da8886ed69570b2863d
-
SHA1
02326b67771de0ebb952216c83d2fa37711cdfcc
-
SHA256
3ad2facecf3844e3f01ae60d30096df6f8321d0360acd6a6d6fc2f97c61738b4
-
SHA512
dea5acf0781b92e77a03b6581bbbb18ea015fe331c722d4d91b0af8b93467c5cb4878a18290bf113a2e630827e02f22dea228b14d086d3dc7b26bc600f63a00f
-
SSDEEP
48:6uyvHtVMN5wq5LRxCnnEzPOi8SMt1q2D/Te9ZJ0vxYJvYkCW9hLE1B:0swAL3QETF8S83D/iLJ0vxuvx9hLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 141118ef703f1da8886ed69570b2863d
Files
-
141118ef703f1da8886ed69570b2863d.exe windows:4 windows x86 arch:x86
05e799da4fd8f6d7fc6fcae92a7399a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ