Static task
static1
Behavioral task
behavioral1
Sample
03c63085264de4352fb7e7f5b605b205.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
03c63085264de4352fb7e7f5b605b205.exe
Resource
win10v2004-20231215-en
General
-
Target
03c63085264de4352fb7e7f5b605b205
-
Size
37KB
-
MD5
03c63085264de4352fb7e7f5b605b205
-
SHA1
8de4bb10825391c87eb482b4a6af9c975be76058
-
SHA256
7168977213ab0fd023c9f68b468a29ce8cfd91b886e40b60cd5fffd2c46c2459
-
SHA512
069cc9416feb128b5b9b11b69306a34726d173962d6311986c8544cd8a7cbae8ea52a9dcbc2834a62ae3e30ff1aea980b03c2bf16537d5d84a1334a1860ed2a2
-
SSDEEP
768:DVowkBDWDbllgT5Rl64+xPm7KUF7UPUQPsjOX2Y30kb76BTWE7OOUb4:ZowkNwJOrl6xIQPOuB0DqE7O1s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03c63085264de4352fb7e7f5b605b205
Files
-
03c63085264de4352fb7e7f5b605b205.exe windows:4 windows x86 arch:x86
f3b6f4750000103aa1cbb63b6daf4f2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
LoadLibraryA
Sections
.text Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE