Static task
static1
Behavioral task
behavioral1
Sample
79a72ef383c18110a12e99810387eae7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79a72ef383c18110a12e99810387eae7.exe
Resource
win10v2004-20231215-en
General
-
Target
79a72ef383c18110a12e99810387eae7
-
Size
33KB
-
MD5
79a72ef383c18110a12e99810387eae7
-
SHA1
518debe2786fb4c1c5995d43a97b3229b59ddbd7
-
SHA256
98bb48bc194813deb9aa55fe544bf0a02ab696308e68c01a7fff057f287703da
-
SHA512
6ea02bd107ba6189ac64edda17bb047fd5f2160f39784bc023681b4ea43a7fcb11197fca7ab5dd83d72b8d4f5734cf9b5414bb28759580cce30ec225120b9d7c
-
SSDEEP
768:eJK8cz2ana3kZtUiQU7HIdk0X8YC8tXr9uZ8PLurju0:eJGhnN3HJ7HIi0X8m1w4urju0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79a72ef383c18110a12e99810387eae7
Files
-
79a72ef383c18110a12e99810387eae7.exe windows:4 windows x86 arch:x86
a9b6ebee4f33ac1ceb30ddf4f61c7243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
FindWindowA
Sections
�� Size: - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�@ Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE