Static task
static1
Behavioral task
behavioral1
Sample
023e75be028631a6bf9d2e09996db50b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
023e75be028631a6bf9d2e09996db50b.exe
Resource
win10v2004-20231215-en
General
-
Target
023e75be028631a6bf9d2e09996db50b
-
Size
42KB
-
MD5
023e75be028631a6bf9d2e09996db50b
-
SHA1
2722e322fb849ed48beb3727f6b48fa0d58bdd3b
-
SHA256
91e6ab25e4589181a5d7264ab182080aba0f6a9621ce4dc8c287cf14d939892a
-
SHA512
8f6eb77a076d25ee6a6968a5155499ad2998968561742b7dd8753812184b1ee9f236ccc715297d2a4a28a5b2a2e23f0f485c2a6c89a7d9dbac6b8b40c57a4688
-
SSDEEP
768:OEkOJN9OJIr749VkHLzavYUV2HukGjJECjCENqAOEBWkdUGGIyL6ew:ONcC04/krzaXOvCjC8OCWvL6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 023e75be028631a6bf9d2e09996db50b
Files
-
023e75be028631a6bf9d2e09996db50b.exe windows:4 windows x86 arch:x86
92f80bca5456b751889bfa577a29327f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
user32
DefWindowProcA
FindWindowA
RegisterClassA
TranslateMessage
CreateWindowExA
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ