Static task
static1
Behavioral task
behavioral1
Sample
02218fc3f73c77295c7a9340da85fa97.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
02218fc3f73c77295c7a9340da85fa97.exe
Resource
win10v2004-20231215-en
General
-
Target
02218fc3f73c77295c7a9340da85fa97
-
Size
2.1MB
-
MD5
02218fc3f73c77295c7a9340da85fa97
-
SHA1
39cda9c2eadb280a357acd79b44fecabf33a1337
-
SHA256
db94a24374ecf40500e529bab2bab548907da69c0226beaacc0b04cc70956d7d
-
SHA512
55da52c38197f34a5f682e286c8545e5f724260d3078e99b4816edc6a7db6b0d6bfa7c92c634af1aa89c6a24cce3182ee7099c18877965259d929d0d9ddfeafe
-
SSDEEP
49152:ya4nQDQs2epM4EU+rZISjFnVN8F71HLlXTvT:T4nQDQs2WCZtjyF71HZ/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 02218fc3f73c77295c7a9340da85fa97
Files
-
02218fc3f73c77295c7a9340da85fa97.exe windows:4 windows x86 arch:x86
f3b6f4750000103aa1cbb63b6daf4f2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE