Static task
static1
Behavioral task
behavioral1
Sample
2254639a223d5ac91c20c29b3a639e12.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2254639a223d5ac91c20c29b3a639e12.exe
Resource
win10v2004-20231215-en
General
-
Target
2254639a223d5ac91c20c29b3a639e12
-
Size
6KB
-
MD5
2254639a223d5ac91c20c29b3a639e12
-
SHA1
c9b8c8f997a1b66efa838229ea695c5f54e0c1e9
-
SHA256
e768868f83cc4aaba31b5554effd42e5e02b52aa1dd7c73e6a507733593598a4
-
SHA512
b33f6e4f7c1fb9f756bb8ba3f267a82bd3304ad4d16b627d057ff58c70c9020340fbaaaec1343a18eff473449fd12870abe8b78632aef544b57243376c0956b5
-
SSDEEP
96:q6U7aFZsNFoEhagq8Pqx/d6u+u9d9WaRoXm1Gr+7ge0p0:qf7aFaF4grqx9hRK6GF+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2254639a223d5ac91c20c29b3a639e12
Files
-
2254639a223d5ac91c20c29b3a639e12.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE