Static task
static1
Behavioral task
behavioral1
Sample
4c80977f305c22ac95bdb17c8ad5d296.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c80977f305c22ac95bdb17c8ad5d296.exe
Resource
win10v2004-20231215-en
General
-
Target
4c80977f305c22ac95bdb17c8ad5d296
-
Size
54KB
-
MD5
4c80977f305c22ac95bdb17c8ad5d296
-
SHA1
21bfa9cf06503ffd89fc7de982ccd91af2ba9d4c
-
SHA256
e166d46f7c95c602c55e0d50d4f87bf9a582f3a1e0c01cf7d3b0c39a5cae7632
-
SHA512
f237b0ebfb1dfd8a77ffd34cbbf84217459fd004f7912e5ddeb69454b3457f437994a629939e6d7c3e828c05e7d82f77465df42d37404d8c3bf75fabdc084869
-
SSDEEP
1536:WWhFr9f/ZvCfT3n5BG4sw6++mYMlxbZGX:W2FrBW1sw63mYMlhZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c80977f305c22ac95bdb17c8ad5d296
Files
-
4c80977f305c22ac95bdb17c8ad5d296.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vyridizn Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
T0R0 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5zd9bm4t Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
an.kk9rg Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3a14gzkz Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
y5maaiyw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ