Static task
static1
Behavioral task
behavioral1
Sample
253d2156bda32db028c1618a5417fe29.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
253d2156bda32db028c1618a5417fe29.exe
Resource
win10v2004-20231222-en
General
-
Target
253d2156bda32db028c1618a5417fe29
-
Size
347KB
-
MD5
253d2156bda32db028c1618a5417fe29
-
SHA1
15068e727ab1d058e84fd9db3f95385c6fd6a057
-
SHA256
8185d588910287d117d0f91e2baddc85f77a436febcb1fe9a95a4aebb1b1062d
-
SHA512
96507e2b4371ff3b0925981e90ffbd6568ba2f56ceb1af5418c9ac6c1999a4e1a4e15f4c85244ebd022affd9f8418c03e25c38ad7a22948db3b86b1bc7ce4329
-
SSDEEP
6144:hCk3A0u4GS6Bp5ywV7oMZRIrxP5tm4BjnyGWFEvIa53eridxXzjQMWRtwNVi1rPO:z9D6Vya7oM6PL7yLFlKdrX3nWPMi1rPT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 253d2156bda32db028c1618a5417fe29
Files
-
253d2156bda32db028c1618a5417fe29.exe windows:4 windows x86 arch:x86
500ff1538958cc73738bf0c262a1773f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
GetModuleHandleA
user32
MessageBoxA
Sections
PEPACK!! Size: 317KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 6KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 512B - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE