Static task
static1
Behavioral task
behavioral1
Sample
769d43bf70759f551858e219c28769b1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
769d43bf70759f551858e219c28769b1.exe
Resource
win10v2004-20231222-en
General
-
Target
769d43bf70759f551858e219c28769b1
-
Size
48KB
-
MD5
769d43bf70759f551858e219c28769b1
-
SHA1
1a3bb87d237c8bb1b8ff80088675598f35b9d80f
-
SHA256
8f2da8b273df198fb95c27a9cb651226b984e2e6280ce819beb7cdc26f624afc
-
SHA512
08a5e677ad24b449fc4f35a4615bce46504fe189865d02066e45ea8b48544dabfd074ca9e31493b08784fa6d286bca494bfd5783d89cdddd52571a75cdda6a78
-
SSDEEP
768:IzAzeA7WHRaLzJZ5cn2piB9551OSKP6dp:uASMWHYLtzc2w1Bz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 769d43bf70759f551858e219c28769b1
Files
-
769d43bf70759f551858e219c28769b1.exe windows:4 windows x86 arch:x86
8d4aa069ccfe4f41955493297d4420aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord855
ord476
ord827
ord858
ord864
ord843
ord844
ord205
ord719
ord375
ord841
ord822
ord845
ord560
ord638
ord185
ord216
ord589
ord766
ord758
ord284
ord462
ord849
ord291
ord558
ord574
ord309
ord415
ord160
ord565
ord551
ord443
ord553
ord515
ord793
ord509
ord406
ord318
ord447
ord444
ord594
ord657
ord550
ord312
ord513
ord795
ord511
ord512
ord377
ord765
ord722
ord364
ord362
ord811
ord305
ord304
ord395
ord784
ord346
ord397
ord419
ord248
ord329
ord441
user32
ord396
ord141
ord145
ord315
ord411
ord319
ord415
ord183
ord463
ord399
ord503
ord181
ord526
ord246
ord342
ord559
ord429
ord254
ord405
ord252
ord235
ord569
ord91
ord247
ord488
ord600
ord179
gdi32
ord282
ord308
ord176
comdlg32
ord112
ord110
comctl32
ord23
ord17
mpegsys
ord51
mplex
ord2
ord1
ord3
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ivycasd Size: - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE