Static task
static1
Behavioral task
behavioral1
Sample
182619fa95f8745cf3a4cde3f49fc3fe.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
182619fa95f8745cf3a4cde3f49fc3fe.exe
Resource
win10v2004-20231215-en
General
-
Target
182619fa95f8745cf3a4cde3f49fc3fe
-
Size
11KB
-
MD5
182619fa95f8745cf3a4cde3f49fc3fe
-
SHA1
142912cc5370938ef6313a8bf6925bcf640a30e7
-
SHA256
6e750ba8c51aa9502b392d31dbc9b5fe7aab028c3b20f26db5618ae2c0dc1b55
-
SHA512
183c0a968c01f2e25b3e775673e7917deea1a72e7fc22ad8fa6cc43de29b7c5054259b0fecfd4ef9e1b95b417d2ba44b536d133a71aa765be3dfeb29ff0160cf
-
SSDEEP
48:6TKu8GWFFELh0v7KmsgDDgbN8/+kvVgQMNcCVnM9ALC5gT7YDcUQ7UZBq7:NGWFwaKlogbKVguSM9A25gTIo4ZQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 182619fa95f8745cf3a4cde3f49fc3fe
Files
-
182619fa95f8745cf3a4cde3f49fc3fe.exe windows:4 windows x86 arch:x86
75425eba3977a336dc6c3f1c3bcbbf37
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
Sleep
WaitForSingleObject
gdi32
EnumFontsW
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ