Static task
static1
Behavioral task
behavioral1
Sample
60435a6c4a441d9d62baed241649b88e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
60435a6c4a441d9d62baed241649b88e.exe
Resource
win10v2004-20231215-en
General
-
Target
60435a6c4a441d9d62baed241649b88e
-
Size
74KB
-
MD5
60435a6c4a441d9d62baed241649b88e
-
SHA1
91fa96d6ddec26e1fdb78ee7dcebf867e453ce7b
-
SHA256
8628a8dffd62ffcdeb8c259ec3fe0450c59bd88ed90b092dc93806fd16963259
-
SHA512
be1191204b6d90a2244559ee4bcfebb6eebcd936daf6789c3b98cb6dfa770f562f421c575bdc2f4b4da5dc196c4b5125b48024120016ef8d95b099db990406ff
-
SSDEEP
1536:9DZYhTJPEJhT0UgK8LN7oBGr2BWmFEYhrvxd4kAuZDa2Ue66ajoplhZ:9dU8p0UP8LxoBGaprZxdA622h6Djmp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 60435a6c4a441d9d62baed241649b88e
Files
-
60435a6c4a441d9d62baed241649b88e.exe windows:4 windows x86 arch:x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
code Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hcn0gk68 Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hot2fzvu Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
femyu8w9 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ