Static task
static1
Behavioral task
behavioral1
Sample
10a933b202459cd5fdf3274702024314.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
10a933b202459cd5fdf3274702024314.exe
Resource
win10v2004-20231222-en
General
-
Target
10a933b202459cd5fdf3274702024314
-
Size
12KB
-
MD5
10a933b202459cd5fdf3274702024314
-
SHA1
6680998394aa1d711a104f74adabbbb036d2e482
-
SHA256
967161d38e56b2bf585bed1344e6c8a80bc43f548a76e9b59fd78862c7c27554
-
SHA512
ca34d4a638dcbbb02f9aa3abd8bed2f638601e3d89262ecd509f18c71f32130cc62a6e836f24de4d76bb2fe53d0e72fa3c245d2f5069b5a38a600c9d16ca6d06
-
SSDEEP
192:zAYAVmofZT9MEYdxJMuJJqq1j/5os3TnWGLVWOk3gmDOKR0W7E4:BAVmoBJuUYJZj/5oI66UgfKR0W44
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10a933b202459cd5fdf3274702024314
Files
-
10a933b202459cd5fdf3274702024314.exe windows:4 windows x86 arch:x86
46b0675c1fd7681c7b19a1c83d5aff83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
user32
wsprintfA
MessageBoxA
Sections
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_cod Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ex_rsc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ