Static task
static1
Behavioral task
behavioral1
Sample
f7e5837139833ffb9c4f3be2bd8d5e60.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f7e5837139833ffb9c4f3be2bd8d5e60.exe
Resource
win10v2004-20231215-en
General
-
Target
f7e5837139833ffb9c4f3be2bd8d5e60
-
Size
2KB
-
MD5
f7e5837139833ffb9c4f3be2bd8d5e60
-
SHA1
ddd1bed62d88903b58b944c917576ed0ce5689e3
-
SHA256
d00064927a86116f595eb165f5734474fd8e8e724f6698baa681a38924a0351e
-
SHA512
14501fecf9a0f5eb814977dd99c94dd2f7d6dac93854128de0a3a086d1bff8a71ae508e84b795669467f79ea8e4274b74799ce19490219c7680d9fe924d49fc9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7e5837139833ffb9c4f3be2bd8d5e60
Files
-
f7e5837139833ffb9c4f3be2bd8d5e60.exe windows:5 windows x86 arch:x86
879783f1ab0000e6d6746cde2751f5df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
SleepEx
Sections
.text Size: 512B - Virtual size: 29B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ