Static task
static1
Behavioral task
behavioral1
Sample
0579bb2980b6b30923360840edb34f35.exe
Resource
win7-20231215-en
General
-
Target
0579bb2980b6b30923360840edb34f35
-
Size
172KB
-
MD5
0579bb2980b6b30923360840edb34f35
-
SHA1
57195a93089f1be4c988c12bbbed9dd91c74fa85
-
SHA256
95909edd6bba0c81f791e457a11ed8260ac456d1f7c024112832ffe95d7e13ce
-
SHA512
25d271ea1258ae691e82bb952ba6285ef4aa84c2d7269dd3783bc41bcc9b492150f999d98b1cdf77bda74732c5e40879ba34a0c302fbad1bed2289fa8a9eec15
-
SSDEEP
3072:WRPcQXh2sISl4u68rFCwcLJZmWLmYIMFYvHmwG7ADBUunrfyP0rwzGlGaSC:Gkk5IS68rFUmVMKvGw4urfysQC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0579bb2980b6b30923360840edb34f35
Files
-
0579bb2980b6b30923360840edb34f35.exe windows:4 windows x86 arch:x86
5d129c3b6a642d0c529630f62c156352
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
SearchPathA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 72KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
1 Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 31KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3 Size: 44KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE