Static task
static1
Behavioral task
behavioral1
Sample
51560a87462966a12cd0b10da134023b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51560a87462966a12cd0b10da134023b.exe
Resource
win10v2004-20231215-en
General
-
Target
51560a87462966a12cd0b10da134023b
-
Size
112KB
-
MD5
51560a87462966a12cd0b10da134023b
-
SHA1
8c163b89de584ffe3a86ad9357f98f8a503ff874
-
SHA256
c1895d402d263a731eb9c56b588bc660fa448cb35f3a0970f75bfe7a67e4779c
-
SHA512
e322d855d5f537eeb2435019a73fc31969f25f23a3a0ee6a68c55903c80da8f83cadffc4bbbbbef8bdb47f69ed655bc24e0818816f72a1307ce5c77c019f155a
-
SSDEEP
1536:eujGT2p1S+mu+hfh+obRJzINjDwT4q6tClWz4c1/:eul+d9RiZwTjrIz4e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51560a87462966a12cd0b10da134023b
Files
-
51560a87462966a12cd0b10da134023b.exe windows:4 windows x86 arch:x86
8391bf75d5a06b281f2a13cbf5433ff1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetCommandLineA
VirtualFree
Sleep
ExitProcess
user32
CharNextA
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ