Static task
static1
Behavioral task
behavioral1
Sample
222ace1a4680b9e83a1f8feed65f957d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
222ace1a4680b9e83a1f8feed65f957d.exe
Resource
win10v2004-20231222-en
General
-
Target
222ace1a4680b9e83a1f8feed65f957d
-
Size
372KB
-
MD5
222ace1a4680b9e83a1f8feed65f957d
-
SHA1
9d0c21ff59c3d7e0e539ac603dd6e72d4baebe56
-
SHA256
5958d12da7b934a7d6bafa8df739d3c60f57179623c8ad1a066c4dd7a4c92fdc
-
SHA512
05790343a3b98b47e3112c248d5ddd11083eedde9f5e7a1ac20e063b2b5ef6e48ce3c42a8745b7835d59c0dcfc2d3b8ab0ea7d4119d5b36771c209f4b7e3f5b6
-
SSDEEP
6144:uaSNleEG8QK1PRPmWO/xwI8JGpBBaGYs3utFSKLPJV8GwgZHow0fCQ0qEbQ:uzeEGY1PRPmWOJwI8mfaGYs3utFnPwqC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 222ace1a4680b9e83a1f8feed65f957d
Files
-
222ace1a4680b9e83a1f8feed65f957d.exe windows:4 windows x86 arch:x86
37c0608f24ea4f5b69005df26d5dd626
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
Sections
CODE Size: 308KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 14KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 26KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MaskPE Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bedrock Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE