Static task
static1
Behavioral task
behavioral1
Sample
295f5430b6cfcb5a5aa397b6363c1ab9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
295f5430b6cfcb5a5aa397b6363c1ab9.exe
Resource
win10v2004-20231215-en
General
-
Target
295f5430b6cfcb5a5aa397b6363c1ab9
-
Size
219KB
-
MD5
295f5430b6cfcb5a5aa397b6363c1ab9
-
SHA1
b21b98ad47988d535c1ca3d9aea43d201d4fb0bb
-
SHA256
79fcbbbb0132e4661af3976531dc5c226e33e4eeb2534aae3185e37c07f5ef2a
-
SHA512
68d739c93692705453634ee07ca3e5798f294b299659d8466dca1dd8dd68ce11a4da8bdf08c5a62ca8672ad1aa172290da90fa114858cc3a3af084cf7cb4e585
-
SSDEEP
6144:dnoRzcGysujqVDFMqGFeoGbKWDVr/RuJYOKhH/T:BwcHsuwSpFHG2WDV5OKhfT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 295f5430b6cfcb5a5aa397b6363c1ab9
Files
-
295f5430b6cfcb5a5aa397b6363c1ab9.exe windows:4 windows x86 arch:x86
52bcca0293a2e7268dc0bc2b29d8148f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
comctl32
InitCommonControls
Sections
Size: - Virtual size: 244KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE