Static task
static1
Behavioral task
behavioral1
Sample
00f82c24636370658595bdfea6423a4f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
00f82c24636370658595bdfea6423a4f.exe
Resource
win10v2004-20231215-en
General
-
Target
00f82c24636370658595bdfea6423a4f
-
Size
40KB
-
MD5
00f82c24636370658595bdfea6423a4f
-
SHA1
4187156ff1f830af576c1ce668addb6597521190
-
SHA256
26221688b4a75d7b2786001d4d018a27ea087b219f86223c952a28d858475c6c
-
SHA512
c132b2f3bf0314f0c2a04e5c9fce47aca393b0feead76fd163a9846bd41181227c472a8b216d5d32d1de7b27bc51c1ff6d9b754879efecc1b1e13d205f806bed
-
SSDEEP
384:03LxYtoHuDpz5U/l5rOCeQepBcdsGr4oz8zlbF127uRZXdrl896E7BYbpvZ3Gy:031+Dp5GKVQ7GGKzj0mXd41+F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00f82c24636370658595bdfea6423a4f
Files
-
00f82c24636370658595bdfea6423a4f.exe windows:5 windows x86 arch:x86
dbc5c6e96eb25f930ad5a8c3d82bdd0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
GetStartupInfoW
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
advapi32
RegOpenKeyA
RegCloseKey
Sections
.text Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio1 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio5 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio8 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio2 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio7 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio3 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio4 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.uio6 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ