Static task
static1
Behavioral task
behavioral1
Sample
1a12c404e135e1cfe7eb698a05082845.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1a12c404e135e1cfe7eb698a05082845.exe
Resource
win10v2004-20231215-en
General
-
Target
1a12c404e135e1cfe7eb698a05082845
-
Size
84KB
-
MD5
1a12c404e135e1cfe7eb698a05082845
-
SHA1
ba23c372bf8f2d2b9167934b967049d96cdabbe9
-
SHA256
bd2be1ff4cc6d094d9499aac73bfdf0459d91da4b8bad03668c9ae776eaf6458
-
SHA512
e4400b546e756d082e9bef6ab70845793ebc30e257495c46e0add7e8c654317f93fdb365f2325fadd012958e2633a6b0b96637bf25f53e146899fe768ee71301
-
SSDEEP
1536:Yg6cy68vz8bFwmDz7d8SVyDeDnef8EMDcF+57SYvOhRTgyklO0d:Ygty684FLXJvyiDnEXF+57nvOngyklD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a12c404e135e1cfe7eb698a05082845
Files
-
1a12c404e135e1cfe7eb698a05082845.exe windows:4 windows x86 arch:x86
78804175a099b65b6b498b5dafc30ced
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
send
Sections
.oi36syh Size: - Virtual size: 436KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.oi36syh Size: 83KB - Virtual size: 84KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE