Static task
static1
Behavioral task
behavioral1
Sample
03c4b5efec8fa34d7334dd2e7c14835e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
03c4b5efec8fa34d7334dd2e7c14835e.exe
Resource
win10v2004-20231215-en
General
-
Target
03c4b5efec8fa34d7334dd2e7c14835e
-
Size
58KB
-
MD5
03c4b5efec8fa34d7334dd2e7c14835e
-
SHA1
db2481c27bcd0fa1410be2bff878d533f21b7113
-
SHA256
cbcd1fb2a32c55b009e6a1d5d9a775a2706560a8b97aa074bd83e6d98d86bb7f
-
SHA512
a1cec73b2ac3a2d6db0d4b5e4001e3ab70b0cf87e21f6a8d103ba47d17ccbb0b9f1ba84232ceb0fa718dd0d85dc62d67587aab0631f89d27b56a9c35347fdcc2
-
SSDEEP
768:XioNQpMGZXlFPVrqX9zm3yr53nm5GMuMQC3aT3:+fRK9zm30dnvfM1az
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c4b5efec8fa34d7334dd2e7c14835e
Files
-
03c4b5efec8fa34d7334dd2e7c14835e.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ