Static task
static1
Behavioral task
behavioral1
Sample
629137f5408fc39399f9292db3501d38.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
629137f5408fc39399f9292db3501d38.exe
Resource
win10v2004-20231215-en
General
-
Target
629137f5408fc39399f9292db3501d38
-
Size
21KB
-
MD5
629137f5408fc39399f9292db3501d38
-
SHA1
163950d9655b405ebd007094a244e239e82408c1
-
SHA256
e287a9828315592bb9df27630ad466cde1b9634ae62e739d4ec4666bc4a73e1a
-
SHA512
d87853614035fee1fd3d6f5b20a81e615b6b8e7f4ee8b8410d4d3df8c297cfb6abe431a02f6d319436868804ca678cd325cead81119b2e84729dd829b036c594
-
SSDEEP
384:BD8bzEoqqUn51MUglNTVnWWTUZLd9muBW+fQF7fhUrOaoEn:D51dglNTV/TAdQq4lfhGOhE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 629137f5408fc39399f9292db3501d38
Files
-
629137f5408fc39399f9292db3501d38.exe windows:1 windows x86 arch:x86
6c2c12fab80982b4fdbac3600c4dcab6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_cgetws
_chkesp
_logb
_dstbias
_eof
_errno
_execl
kernel32
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetFileTime
GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetProfileIntW
Sections
.text Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 7KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE