Static task
static1
Behavioral task
behavioral1
Sample
67347d7182b4dd6a7c7667c0824baa2a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
67347d7182b4dd6a7c7667c0824baa2a.exe
Resource
win10v2004-20231222-en
General
-
Target
67347d7182b4dd6a7c7667c0824baa2a
-
Size
50KB
-
MD5
67347d7182b4dd6a7c7667c0824baa2a
-
SHA1
b83754dde3042244cdc625a23bfcad7b9fa50d78
-
SHA256
bb6fb5c357004684ca38ee924d1a3cc19cd01330f6ca3e054df610f926ceb004
-
SHA512
1532872845188030fd10b6afec29b600408cd4db9b4f8cd8c5cf93d1ed0a34c05ad84145a96a40b4425186d5de8e6cd0ff5cd3b48904fbe25340a36e94af109e
-
SSDEEP
1536:1JArvz8bYJ32oe2NUb248ouAsBv0TAT2gAyE:1JyLZ/53Zld0TJg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67347d7182b4dd6a7c7667c0824baa2a
Files
-
67347d7182b4dd6a7c7667c0824baa2a.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE