Static task
static1
Behavioral task
behavioral1
Sample
456c5ec5b7df5467f12d160609acae99.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
456c5ec5b7df5467f12d160609acae99.exe
Resource
win10v2004-20231215-en
General
-
Target
456c5ec5b7df5467f12d160609acae99
-
Size
132KB
-
MD5
456c5ec5b7df5467f12d160609acae99
-
SHA1
c68a4746d6aa9ef06f6130ad2a9695fef7dd3c0d
-
SHA256
d0085481c6b8a29c112bf81d7fe8f48b5df12c27d7277ca961a4309eeaa0cfe6
-
SHA512
1daaece2f450cfd27f341bbe52ea8dd62d98128fd71995e527e23e74fdf0dd9746b2c74eda4c7233ef7ebd9f689d5b4caca466abb468bfdb3f473b6d734f6c8d
-
SSDEEP
3072:K5iNkXsezTmeoZ26nOoVoIcj0w5p4qRRtMq0rvuyzKBSs2Ay6LA4:K5iNom3dOWBSFpdVMfPzKBl2A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 456c5ec5b7df5467f12d160609acae99
Files
-
456c5ec5b7df5467f12d160609acae99.exe windows:4 windows x86 arch:x86
407aac4d031a9ebf03c3028390d300c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetVolumeMountPointA
WaitForSingleObject
SwitchToThread
WriteTapemark
PrepareTape
EnumDateFormatsExA
SetWaitableTimer
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
icode Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
idata Size: - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ