Static task
static1
Behavioral task
behavioral1
Sample
251a9caddb5c6a52e2a2f12b56c48dff.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
251a9caddb5c6a52e2a2f12b56c48dff.exe
Resource
win10v2004-20231222-en
General
-
Target
251a9caddb5c6a52e2a2f12b56c48dff
-
Size
76KB
-
MD5
251a9caddb5c6a52e2a2f12b56c48dff
-
SHA1
6c626865bec72f5e1640c62e41e4df3ac0bb8701
-
SHA256
25a7dcb8eabf6ac1e604d4810359ee54c2de448f0b180ba407e1ec866933b392
-
SHA512
f45a1fa4d72212a37938586d360aec7031e9e3bf210e16d523b8baf42db561d4c11e601896d1dd3c00965fbfc9e74a3db755c5d70fbb81f4f1efe3cb1c4697b6
-
SSDEEP
1536:/ElYG77zw85dD9L+clgSVaRbT+NmGvUwJSRyRepjVrs2ryrd1vUQuq6:Kzb5dD9+OvVaZT+NmwJSRy0Hs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 251a9caddb5c6a52e2a2f12b56c48dff
Files
-
251a9caddb5c6a52e2a2f12b56c48dff.exe windows:4 windows x86 arch:x86
aeb33dc5cbeeb8b623bf9991af0fa4dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleInputA
VerifyVersionInfoA
TransmitCommChar
GetConsoleMode
FlushViewOfFile
ResetWriteWatch
GlobalFindAtomW
WriteConsoleW
FileTimeToLocalFileTime
LocalAlloc
SetHandleInformation
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE