Static task
static1
Behavioral task
behavioral1
Sample
2064e416932d02d28004782674de156d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2064e416932d02d28004782674de156d.exe
Resource
win10v2004-20231215-en
General
-
Target
2064e416932d02d28004782674de156d
-
Size
58KB
-
MD5
2064e416932d02d28004782674de156d
-
SHA1
76d619f6beaa9b35dd03af4086ef287ce8342180
-
SHA256
5c56bea23ce633ae89c1d8f60ffb4c02f19d8cb059851c1dcbff4cc1eb65bb79
-
SHA512
2c07e9730eb43a096704a8cc772f11d63240496ad7d8b2bc842185bdca43eb00e76b4fbdc06c1b13035d3269bef127f9a628956fefcfe985b37df23f80faecc7
-
SSDEEP
768:NaQLGnb/UZU9QZU9XjOxigiiiiii7Om1DGu0v:Y+zbh1tA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2064e416932d02d28004782674de156d
Files
-
2064e416932d02d28004782674de156d.exe windows:4 windows x86 arch:x86
48c94ae962dd709c07e6f9042537ca59
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
GetProcAddress
LoadLibraryA
Sections
.text Size: 512B - Virtual size: 365B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ