Static task
static1
Behavioral task
behavioral1
Sample
0564c280f2c1c6e404262f0bcb82d2cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0564c280f2c1c6e404262f0bcb82d2cc.exe
Resource
win10v2004-20231215-en
General
-
Target
0564c280f2c1c6e404262f0bcb82d2cc
-
Size
277KB
-
MD5
0564c280f2c1c6e404262f0bcb82d2cc
-
SHA1
50dd1146e5db29eddf30147a16ef60587d955b91
-
SHA256
89f278f969e19251089d8c51e6a0c9a8d127b109110f435eeedff3a4fcf2fc44
-
SHA512
50aa2e6b4e5e05b63242fa24812a411ead7dca0f1ac10de153f70b1fe7f0c202b4a2558b4b49be1f9bc3b514263842a691f3148b7e1bd8873e7cdc2dfd4878d8
-
SSDEEP
6144:t8zEyvI31EpVBBUo3In/xBY/ZjBkW4DKvsIUuErh1pu:tA3I31IrSo3I/x+/ZBkW4DY7UuQu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0564c280f2c1c6e404262f0bcb82d2cc
Files
-
0564c280f2c1c6e404262f0bcb82d2cc.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
BY:��' Size: - Virtual size: 784KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BY:��' Size: 276KB - Virtual size: 280KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BY:��' Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE