Static task
static1
Behavioral task
behavioral1
Sample
00d22f14254894de92fb862dc97a21dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00d22f14254894de92fb862dc97a21dc.exe
Resource
win10v2004-20231215-en
General
-
Target
00d22f14254894de92fb862dc97a21dc
-
Size
426KB
-
MD5
00d22f14254894de92fb862dc97a21dc
-
SHA1
3b2098d84ee155de9eabc6e334c7c01258f99df4
-
SHA256
b2f26daa4feeeef7144b574b60447e7d6450f46a40c21e09b21213a197ceb0bb
-
SHA512
aee183fc7a27dee524f5868d75cec12104f342f1377a72c9f9af515f10469004608f2a5e1644c576b75321481910fd284cff9a8b37b05d6a26bb53a75888b8e1
-
SSDEEP
6144:pJv/QqWYm/n2qDjETr+QoHuQJG7N3RoPu3z/zQ7PnuVFMJiI3QBh:pZTWYzqkTr+fJGp3RP7zQ7PnbiIuh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d22f14254894de92fb862dc97a21dc
Files
-
00d22f14254894de92fb862dc97a21dc.exe windows:4 windows x86 arch:x86
d76f4237a8ae158292f09835997a1d9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateProcessA
Sections
Cvsd Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Daed Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bfd Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ikord Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vse Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rbdrf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.razrd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rkfr Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fgr Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alrdg Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE