Static task
static1
Behavioral task
behavioral1
Sample
20b24610a66757969cbebcf2d69c311f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20b24610a66757969cbebcf2d69c311f.exe
Resource
win10v2004-20231215-en
General
-
Target
20b24610a66757969cbebcf2d69c311f
-
Size
61KB
-
MD5
20b24610a66757969cbebcf2d69c311f
-
SHA1
151a894bcbc2d88c25fb9046fa0d507ebdd2dc34
-
SHA256
39f1d4e33d0e3dd08acedcefdc530f32ee7a293656613ae0a165e6c949dd1c21
-
SHA512
f409c6083e39bb59efe4db6d6b73679cbeec94c7c747dd9571c81fecb18c0d1c1fb3a45d9be2167a003812dbfebdb41230d227ca6452710aa0b7612d87998cdd
-
SSDEEP
768:43abC+kXIHlEQwsJali59BuQXLJhj7eMA0KsLA+s7IvLMzDqlf07/79RCCUGPkzZ:AN+kGqlc7J4jmFbIcfYjfUGcROhUUpc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20b24610a66757969cbebcf2d69c311f
Files
-
20b24610a66757969cbebcf2d69c311f.exe windows:4 windows x86 arch:x86
c8f468f0ff692b97e5d3e75acb48062b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
CreateFileA
WriteFile
ReadFile
Sections
.text Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE