Static task
static1
Behavioral task
behavioral1
Sample
30ecdbbce8e0b481df65368ecb3eff29.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
30ecdbbce8e0b481df65368ecb3eff29.exe
Resource
win10v2004-20231215-en
General
-
Target
30ecdbbce8e0b481df65368ecb3eff29
-
Size
128KB
-
MD5
30ecdbbce8e0b481df65368ecb3eff29
-
SHA1
281d86fdbddcc4275aced6c744d3f7f867e898d6
-
SHA256
798044bee2b6fa4cd568b87869d1d36b23450998cbbdc704075b44f208c39efd
-
SHA512
e024a1e942c56a70a6b1733da53c62bbf84526b33737fae539a6ef3c62fed25566d983797ff79caf9c0e106c05b31b5084e5e3fe55baa20dc08018313a5e43eb
-
SSDEEP
3072:YmmoEUusxosw/NSkdtnd/EkxYUr4xtoWJ/E0:NGsxosaJtnd/Ek2jJc0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30ecdbbce8e0b481df65368ecb3eff29
Files
-
30ecdbbce8e0b481df65368ecb3eff29.exe windows:4 windows x86 arch:x86
baa93d47220682c04d92f7797d9224ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
comctl32
InitCommonControls
Sections
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zdovisdy Size: 792KB - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fnvfzlza Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE