Static task
static1
Behavioral task
behavioral1
Sample
42bbda1ae520772782c22a66ef6c5a58.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42bbda1ae520772782c22a66ef6c5a58.exe
Resource
win10v2004-20231222-en
General
-
Target
42bbda1ae520772782c22a66ef6c5a58
-
Size
198KB
-
MD5
42bbda1ae520772782c22a66ef6c5a58
-
SHA1
7b0d879f54b243670e4a6ebb19efe185ed1499d8
-
SHA256
a3edba9b92dab28e015ae5b85c886df861064093bfaa70e946272ab42436d02d
-
SHA512
1b605c17b4ef9fdd9fbe38bfa634ca01fd5c1a43a6a4879c19d2282c9042d16c85a32422917ef05a8e2de40b71c74beff56845332eeb8b48c3c6d8d2075ba91f
-
SSDEEP
3072:CToEa7XBbzUAWhOnfeIWmTzts1JMNn5dXG+gTm28JTuYy7Hhyo8l7eCuXGp/NCx:cwDRUvOiMsIHg8JTuYGhJNsNa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42bbda1ae520772782c22a66ef6c5a58
Files
-
42bbda1ae520772782c22a66ef6c5a58.exe windows:4 windows x86 arch:x86
7bcb4be8a284e4ec65e8f7af4ff9f3bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord696
Sections
.MPRESS1 Size: 132KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE