Static task
static1
Behavioral task
behavioral1
Sample
1690fb7b7f83908d4457d8a8d6aef32b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1690fb7b7f83908d4457d8a8d6aef32b.exe
Resource
win10v2004-20231215-en
General
-
Target
1690fb7b7f83908d4457d8a8d6aef32b
-
Size
21KB
-
MD5
1690fb7b7f83908d4457d8a8d6aef32b
-
SHA1
f6246e7c338579d7801fcb70cb047688bff51076
-
SHA256
9a1358800c646a8fc6d309f2e885a2f9c8047c461394c2cab2d7d41bd9137e94
-
SHA512
40fc5dc4fd626e451f21064dc9b8fbab48f28eff95f1309e47cac5c277625bea7815e000bf06494a89fb6fa83fc9b85cd662a4cd51c67811802317d27c179219
-
SSDEEP
96:IL86T8/cJA2WeGgDEJJo0KnYbY3YTYjTYjYoiYwvCD2GCUIYSSEJ3bJrH46ZUcu1:II/cJ8M9cmvV7ZKl9R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1690fb7b7f83908d4457d8a8d6aef32b
Files
-
1690fb7b7f83908d4457d8a8d6aef32b.exe windows:4 windows x86 arch:x86
aeb9a92ef0e72ba013ace229fddfef44
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCommandLineW
GetModuleHandleW
GetStartupInfoW
ucrtbase
__acrt_iob_func
__p___argc
__p___wargv
__stdio_common_vfprintf
_configure_wide_argv
_get_initial_wide_environment
_initialize_wide_environment
_set_app_type
exit
Sections
.text Size: 4KB - Virtual size: 600B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 492B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE