Static task
static1
Behavioral task
behavioral1
Sample
01fa8f03bbc3148e0bf92e160b773cb6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01fa8f03bbc3148e0bf92e160b773cb6.exe
Resource
win10v2004-20231215-en
General
-
Target
01fa8f03bbc3148e0bf92e160b773cb6
-
Size
19KB
-
MD5
01fa8f03bbc3148e0bf92e160b773cb6
-
SHA1
c05b0355fc1a0c7c8beea8a719fdf1706eb9b3d8
-
SHA256
caae7139899c85936f7dc024e625e9282f975bc0013352aeec3c4b4b19cc06cb
-
SHA512
d751cda92c41448eaf262b0e2b007af25c97d044590b15e96f7b4a27190bb055d3a408264e42e9f0b3d2cdce4e690ad28012f3e2ee420f4d6d1444780f16d92e
-
SSDEEP
384:LeP1j6I5eL2WWsCV8qjIpTulUl4XrYbnI/wXXhVZdVRkhR8XOpHr:LeNd5dI8WudXrYrfuR8XOpH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01fa8f03bbc3148e0bf92e160b773cb6
Files
-
01fa8f03bbc3148e0bf92e160b773cb6.exe windows:4 windows x86 arch:x86
b8dd9610f7f3c4e817e66f3501bf26f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
�2 Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
� Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�$ Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE