Static task
static1
Behavioral task
behavioral1
Sample
14add6cfa8fad0ea7a602359aec616d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14add6cfa8fad0ea7a602359aec616d7.exe
Resource
win10v2004-20231215-en
General
-
Target
14add6cfa8fad0ea7a602359aec616d7
-
Size
11KB
-
MD5
14add6cfa8fad0ea7a602359aec616d7
-
SHA1
a676ac0295c8d44716f6abedc43f13d8c03f38d6
-
SHA256
aa86200d8039d247b692954f679843e6a80fcf22adcbbe23c9f4990ffdc24390
-
SHA512
7d50e539baccadd5af882733d0bcc22bce2b868da18b3644f572e4764d8310472c97209b1909c387710912a14e771be195f843862a663e33e69e6f6640b96243
-
SSDEEP
192:IGJmfcQNbvKBAFmMveI8p/5Ttxs4wqsUGizsZjYjLsr:IsQNW+FBeI8zTtxs4xsUrqsLsr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14add6cfa8fad0ea7a602359aec616d7
Files
-
14add6cfa8fad0ea7a602359aec616d7.exe windows:4 windows x86 arch:x86
0e63e91f451aafca248fc5992582b2e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
VirtualProtect
VirtualUnlock
GetLastError
Sections
.text Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ