Static task
static1
Behavioral task
behavioral1
Sample
0874d48785305fb3cc8c02738f1d87fa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0874d48785305fb3cc8c02738f1d87fa.exe
Resource
win10v2004-20231215-en
General
-
Target
0874d48785305fb3cc8c02738f1d87fa
-
Size
363KB
-
MD5
0874d48785305fb3cc8c02738f1d87fa
-
SHA1
05b9d461e58f0bd3e4d3686af0ed73a649bc8246
-
SHA256
3a014cfb92d02c0f95970679a13580b86fd5b49ad716157ba13709b1c2f0aabd
-
SHA512
c1adfdf43c7e8094c53c7ac934a98f30bdec678e9f3defc681a22bf35464b16a77c786a490499d643befeb8ddc34e9daa928ff9332df857dd1a8442d3aaa6977
-
SSDEEP
6144:h25xqIAxHteDn0m2ILkWFInBQYY0PEb/XwCPAd2Jv8PZCMHa0dicuzKK+VwPkm:ho8NmYK4B2/BPAd2y4MHzscuOKowPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0874d48785305fb3cc8c02738f1d87fa
Files
-
0874d48785305fb3cc8c02738f1d87fa.exe windows:4 windows x86 arch:x86
2717a120f3532759192746b08a75beea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE