Static task
static1
Behavioral task
behavioral1
Sample
003596081d765ec2862f6075ce075a14.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
003596081d765ec2862f6075ce075a14.exe
Resource
win10v2004-20231222-en
General
-
Target
003596081d765ec2862f6075ce075a14
-
Size
8.1MB
-
MD5
003596081d765ec2862f6075ce075a14
-
SHA1
0657bf75d5a7895afd24e314750b84eff50c5a41
-
SHA256
8a537edbd680ac359171195af42bbcedef194371f39338e22fbc21e6190cd5b2
-
SHA512
5ee2a19c1d2d3f5f2193bed2e06f0b3ca8c9d71a9af3ec3adbc64842194143d6cd06d5c4c0e561ba496369670397266cb3a676cc512a908e7dd23ac66c93325a
-
SSDEEP
98304:JMoyckGd333498JgxC9Y5lpuG83jeBiqVmrgq8nyZ86KIgFOm9eLQqQuSbeTPPp:CskGd3334OQIG82zmMn+JGIDQurN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 003596081d765ec2862f6075ce075a14
Files
-
003596081d765ec2862f6075ce075a14.exe windows:4 windows x86 arch:x86
65b6862e9898b195f4ef7a1685fd82dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
memset
comctl32
InitCommonControls
user32
MessageBoxA
shell32
ShellExecuteExA
ole32
CoInitialize
Sections
. Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 1024B - Virtual size: 700B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE