Static task
static1
Behavioral task
behavioral1
Sample
f91bcae66caf59b041293f29edb0d8db.exe
Resource
win7-20231129-en
General
-
Target
f91bcae66caf59b041293f29edb0d8db
-
Size
209KB
-
MD5
f91bcae66caf59b041293f29edb0d8db
-
SHA1
8633191160928a7505851c6fbc061b901cc9e268
-
SHA256
3886a1c579b79db5624f804814355aad568725cb65bdab160dae56cf24672361
-
SHA512
dcf0349322eb1a3759ea74965e5e2c1c8bc837bba464d049f2d47882b8876a9cb68f676a3b425b8c304edf30466cce21142df2c952a310e4144f6c8cb125f03f
-
SSDEEP
3072:lrNBkqN25qYRl14/hNyhHkw5dNRg4fM3aTTxpTZwsQMSbDWr/K:l253RlAhMhHkiNG4fM3aTzdwsad
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f91bcae66caf59b041293f29edb0d8db
Files
-
f91bcae66caf59b041293f29edb0d8db.exe windows:4 windows x86 arch:x86
2c3effbaa72e20c00af2eb9ce00ee407
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
FreeLibrary
Sleep
Sections
.data Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ