Static task
static1
Behavioral task
behavioral1
Sample
02fbb1a252077b61ed1555ee81aac654.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02fbb1a252077b61ed1555ee81aac654.exe
Resource
win10v2004-20231222-en
General
-
Target
02fbb1a252077b61ed1555ee81aac654
-
Size
22KB
-
MD5
02fbb1a252077b61ed1555ee81aac654
-
SHA1
f1a65b218569b4f9298fb88e41addd5382afa81a
-
SHA256
07d4c87989eeae8bd811e1d0aee037c9808d323cb4480f2bb559ddb189211866
-
SHA512
8fa2b799b0f4e7c4b3ba19b49f2d0273e09636a3d80411aef9194e65d3c76a9de1465d0a92ce74b96f77487a8c9f5e4d1a984fe7374c2a1a6997fff39de574d6
-
SSDEEP
384:rat4aSo1+esbKvlJCHJkXnY0bGgFIUXfUGzh6js7lNTn6MIyBLJy5roq//r:+So1Q4wk3Y0I+gsDn6MIMJy5rd/j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02fbb1a252077b61ed1555ee81aac654
Files
-
02fbb1a252077b61ed1555ee81aac654.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE