Static task
static1
Behavioral task
behavioral1
Sample
409ca8335d583dc5cbcfc0d0d4099b8f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
409ca8335d583dc5cbcfc0d0d4099b8f.exe
Resource
win10v2004-20231215-en
General
-
Target
409ca8335d583dc5cbcfc0d0d4099b8f
-
Size
66KB
-
MD5
409ca8335d583dc5cbcfc0d0d4099b8f
-
SHA1
61f8c30a570e709973bd6bb4a69bfe582a187a29
-
SHA256
f019747cc82e01dcb2a3ddd6ce6773ec75a1d625b9a6947af7dbfed2b3503a5a
-
SHA512
509e22655e77d140afb6d1b6dffd886fa75088784750795d122aaac88ae43b8fb8d1c975a5e377e1f90d4ae31496012bc4f482d15171d177575f7d0a108580c0
-
SSDEEP
1536:2b+Zoe7lMnoYk0LZuBBRLDggBTO6DanUN:dou+noYtIBvnO6qUN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 409ca8335d583dc5cbcfc0d0d4099b8f
Files
-
409ca8335d583dc5cbcfc0d0d4099b8f.exe windows:4 windows x86 arch:x86
a53f732e1bbd70e2b3217e8d53ce6afb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
Sections
pec1 Size: 51KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pec2 Size: 13KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE