Static task
static1
Behavioral task
behavioral1
Sample
179f610d86e4876e39bec2cf62c3c599.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
179f610d86e4876e39bec2cf62c3c599.exe
Resource
win10v2004-20231215-en
General
-
Target
179f610d86e4876e39bec2cf62c3c599
-
Size
9KB
-
MD5
179f610d86e4876e39bec2cf62c3c599
-
SHA1
fc6ed635006c95193c18c25b958924e227ff9434
-
SHA256
f26764077b362c09abc2f7a9582e0facf5fd2fc679a35d9642be93bcb55f9887
-
SHA512
fe096cac291b956667c94e5791e0cd8e9b38512bf9af6448c68a1789550da3d2815ab05b3c7b8f9b9bc6bb03d82b657bc0ee65ffc20f6d353bc95a08b19e5858
-
SSDEEP
192:/LlwZxilcpQ9FHsAFFO7PB/BBaSBDjofjGiEQNxRAlefQ+V:D2ol8QHHsoMD7YSOGiEYRAlefhV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 179f610d86e4876e39bec2cf62c3c599
Files
-
179f610d86e4876e39bec2cf62c3c599.exe windows:4 windows x86 arch:x86
2eda502d39734c2a70c5e0d029966397
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
ExitProcess
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE