Static task
static1
Behavioral task
behavioral1
Sample
02f78dea09e148ef051e70782116ee20.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02f78dea09e148ef051e70782116ee20.exe
Resource
win10v2004-20231222-en
General
-
Target
02f78dea09e148ef051e70782116ee20
-
Size
37KB
-
MD5
02f78dea09e148ef051e70782116ee20
-
SHA1
3e430f4a175cd363332ac39de8141e7f1c73a420
-
SHA256
596d3cd6cb55f18db361320a68dfabf4b61f8e04fdb18796dd2fa5348673a97c
-
SHA512
484e4a5c5c8b77930b99f20c34380703464828dfa2c1bb0975578722454ae14732b5e26a645e515f0dadadf0a9e23ef772a1215bce3668b62d831d7be6bec0b2
-
SSDEEP
768:lUBX3P/mdJGjbEKFRu3R3T3Ll3Nlb98SdV5+Jlq/cln+6w3lqMpJ32YPUvel1ogm:lgfOzGvEKFRYRjx79Nz+JocF+6wbmY8N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02f78dea09e148ef051e70782116ee20
Files
-
02f78dea09e148ef051e70782116ee20.exe windows:4 windows x86 arch:x86
6826f702bc9a4df7f4df7448f883a268
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
CancelDeviceWakeupRequest
CloseHandle
ExitProcess
GetLastError
GetModuleHandleA
GlobalFree
ResetEvent
SetEvent
Sleep
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ