Static task
static1
Behavioral task
behavioral1
Sample
187239cbcf26473586faf6703e9856a9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
187239cbcf26473586faf6703e9856a9.exe
Resource
win10v2004-20231222-en
General
-
Target
187239cbcf26473586faf6703e9856a9
-
Size
97KB
-
MD5
187239cbcf26473586faf6703e9856a9
-
SHA1
9a6246d3b44d2219f7de7f2d950a5b727523bd51
-
SHA256
e17c85294529f63834ca07ccf0a7891afe13ee008953ba847eae1a865adedc3a
-
SHA512
09698cd23fbcbe4e4f18cc46c46c1cb25d8d1742e90fc75048c0a564e54ed4601cabd1a1dbf85b5ab430d1b219aaf59927a6c1beced5e755be0393baa87d23b9
-
SSDEEP
768:NfGFboIXrNietrBiFqQG2Q1AVU1w95NDpt3sX:NfibourNj+Q19ORDjcX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 187239cbcf26473586faf6703e9856a9
Files
-
187239cbcf26473586faf6703e9856a9.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE