Static task
static1
Behavioral task
behavioral1
Sample
14bc1f5dd739971744d7c91952d4c614.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14bc1f5dd739971744d7c91952d4c614.exe
Resource
win10v2004-20231215-en
General
-
Target
14bc1f5dd739971744d7c91952d4c614
-
Size
784B
-
MD5
14bc1f5dd739971744d7c91952d4c614
-
SHA1
f025f11096ea874bfaf39ec7528f58ffb7b039e4
-
SHA256
e2ad5156718a5f57ad027008d3fd0b2d6058f75f094671ff2ccae5d439ad0be1
-
SHA512
31cc191cad249f5f498a61311d7b7ffed7fced9ec1dbdd84da1dedd271bc71e8c4a78b1f145e4bdbc8b34d8cc76babb5b57b8241a86595cf04c4a2a8c56098ca
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14bc1f5dd739971744d7c91952d4c614
Files
-
14bc1f5dd739971744d7c91952d4c614.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ