Static task
static1
Behavioral task
behavioral1
Sample
1210d9cabdd9663317edc4953bf3f622.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1210d9cabdd9663317edc4953bf3f622.exe
Resource
win10v2004-20231222-en
General
-
Target
1210d9cabdd9663317edc4953bf3f622
-
Size
784B
-
MD5
1210d9cabdd9663317edc4953bf3f622
-
SHA1
76774815a979c3db33d0c09f0bbf01c930b3f3bb
-
SHA256
5333f696c55de99b35fb68fa04b3fe8af306b808b080782fcbfc66f9da84e2cc
-
SHA512
9d673fc4a9d1bf71307cffb975ee346a12343e713f5a2e8d4137f3320af05ebd4537fcedd8feb7507f5a85abf7ca57d5953d1936cd72cf04b37afb2d32e21978
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1210d9cabdd9663317edc4953bf3f622
Files
-
1210d9cabdd9663317edc4953bf3f622.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ