Static task
static1
Behavioral task
behavioral1
Sample
1d4c366a7ce34b61c129c657cdf6f372.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1d4c366a7ce34b61c129c657cdf6f372.exe
Resource
win10v2004-20231215-en
General
-
Target
1d4c366a7ce34b61c129c657cdf6f372
-
Size
70KB
-
MD5
1d4c366a7ce34b61c129c657cdf6f372
-
SHA1
daaf5076e1b1926d934de2634dee12e01e478fa3
-
SHA256
05d32ff0055cc5d5ac47be16a63e33247db7e9b1027d065fca8b7add4c9f4443
-
SHA512
a074884b6ed9c2b45064adc1fd1595205e5d446a4d11d14171d7b9514df51cfe97b7250c34e88a1ed8a65a26dd5127a6820621609d83a608c9649d130c6b4a71
-
SSDEEP
1536:+sxVJrI8e9y4QMv1mxgTfDp/00CZOOsxTITdgUAD1qyXqCWG:+SVXe9zQMvbp/08OsFcd1ZIzL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d4c366a7ce34b61c129c657cdf6f372
Files
-
1d4c366a7ce34b61c129c657cdf6f372.exe windows:4 windows x86 arch:x86
573a8e3002c3a49e385a632af519e901
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
LoadLibraryA
GetTickCount
lstrcmpiA
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE