Static task
static1
Behavioral task
behavioral1
Sample
1bdc63d11e4d35dbe9088b0c96840975.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1bdc63d11e4d35dbe9088b0c96840975.exe
Resource
win10v2004-20231215-en
General
-
Target
1bdc63d11e4d35dbe9088b0c96840975
-
Size
3KB
-
MD5
1bdc63d11e4d35dbe9088b0c96840975
-
SHA1
96ba96b02d8faa2ce469ee3e4bd9b846e1d5adea
-
SHA256
e4c7b618ca6d7c8947f9b641b08b170fc5e44398f1061258c11639cbe1d99cff
-
SHA512
d205a57362042e309071baa887209201806ff71dd087c49f73e15e6d4fd5c32be4fc6dcfb97680f7cc12a930fa4e4199b45e5f6905b69ea0faa395653978ea6b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1bdc63d11e4d35dbe9088b0c96840975
Files
-
1bdc63d11e4d35dbe9088b0c96840975.exe windows:4 windows x86 arch:x86
ef76055c162e902cfa066514a7028408
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
kernel32
CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontFamiliesExW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ