Static task
static1
Behavioral task
behavioral1
Sample
20b71ea4a7c151a6e37dfef6527d0fc8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
20b71ea4a7c151a6e37dfef6527d0fc8.exe
Resource
win10v2004-20231215-en
General
-
Target
20b71ea4a7c151a6e37dfef6527d0fc8
-
Size
47KB
-
MD5
20b71ea4a7c151a6e37dfef6527d0fc8
-
SHA1
3d763fbb01424658dce74de19cb2c094eed63699
-
SHA256
ac7f1055775e799a8ff74d84a8eaa2d43c981b0f74748d1988d19c4f8d759ec5
-
SHA512
0ac3b68b33611ac907b1505603170c5a26f2096b868208111a5fda3af7b163eb4c71d3fe9c11c34d5738f9a96662bb6548815d1f92f0116bff519204eeaace3d
-
SSDEEP
768:lNlDdpTgGiskfwmd6TzBANkVo6Luss/SfwVMlGQYFr9opuQGmvp:lP/OfwZ1A6Vo6LtxfNgQ2rQNbv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20b71ea4a7c151a6e37dfef6527d0fc8
Files
-
20b71ea4a7c151a6e37dfef6527d0fc8.exe windows:4 windows x86 arch:x86
0b37121e47f35470e88510a909ab3830
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
advapi32
StartServiceCtrlDispatcherA
ole32
CoUninitialize
oleaut32
VariantClear
Sections
.text Size: 41KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE