Static task
static1
Behavioral task
behavioral1
Sample
051bf550879259eb0b4c4e595489cfa6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
051bf550879259eb0b4c4e595489cfa6.exe
Resource
win10v2004-20231215-en
General
-
Target
051bf550879259eb0b4c4e595489cfa6
-
Size
85KB
-
MD5
051bf550879259eb0b4c4e595489cfa6
-
SHA1
2d316d4a995935ebc54f958627e7ab7f0309e5f3
-
SHA256
434a61dc3c1dece9c1e865ec948a73a3b3cee7ef804b72094cc8bad7ecaef496
-
SHA512
4b79b08e28d73f3a229b364cc8325ce55d4862cfa55c6f216a734a2d0c6c867574776dda809cb41df8e653f07206a8fc8750737d7c492d212127ee4c9f8b64f9
-
SSDEEP
1536:eDMowhQV/bCNr3+TgZz71yaV1p6LyaPLl6Zdb9XOEi4V/HWu+z:2wSbCJ+67gaqxPLl6ZdVOn4V/2u+z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 051bf550879259eb0b4c4e595489cfa6
Files
-
051bf550879259eb0b4c4e595489cfa6.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.svkp Size: 51KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 8KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE