Static task
static1
Behavioral task
behavioral1
Sample
1760aff8fe754b178e4cc2e2d2bbc4fe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1760aff8fe754b178e4cc2e2d2bbc4fe.exe
Resource
win10v2004-20231215-en
General
-
Target
1760aff8fe754b178e4cc2e2d2bbc4fe
-
Size
6KB
-
MD5
1760aff8fe754b178e4cc2e2d2bbc4fe
-
SHA1
4286542e6cbe6366c3a52927348d8585af2fac33
-
SHA256
e90e27c5be446dc5ebc007916400f5867fbc3b64ec849b0bfe9c094e675496b1
-
SHA512
447408658a54049d2acb6dc1c1ce582ee2e4a76821e40093f241063f4c689de2c14b11df22a2353f9e76654466bac81cb536cc41e3ce5e8dddd78b673f1e567f
-
SSDEEP
192:AiGcovKhc8h8egRsRzrLJNgjyTM2gjMMFmwiSu:/GcThc8csRzvwjyAwQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1760aff8fe754b178e4cc2e2d2bbc4fe
Files
-
1760aff8fe754b178e4cc2e2d2bbc4fe.exe windows:4 windows x86 arch:x86
250fada25686cc1f99410e180db86233
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateThread
ExitProcess
ExitThread
GetTickCount
RtlZeroMemory
Sleep
VirtualAlloc
VirtualFree
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 136B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Iҝu�X� Size: 425B - Virtual size: 425B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE