Static task
static1
Behavioral task
behavioral1
Sample
234ae080b7834ff4af76d1259da42432.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
234ae080b7834ff4af76d1259da42432.exe
Resource
win10v2004-20231215-en
General
-
Target
234ae080b7834ff4af76d1259da42432
-
Size
105KB
-
MD5
234ae080b7834ff4af76d1259da42432
-
SHA1
db7f75a1ec1c7940b449fb77ac0b7a2fddc9de1a
-
SHA256
48d6ab9e9deb2b1b278ccbdcd923ba5b4f3d6ff14f49cca4ed190c706ce21053
-
SHA512
689adbe8cce56d03285c77d28e4204adf096ef2a05f4c641012e224757a21465282d3734ee326b4ca1234e73f48155f303fcd1b1f9583384a0d202ebe1cb7e20
-
SSDEEP
3072:SCXELNZ8Vt4QQCJIjUmtyx7Wj5gvTTv7nq9vtp:rX88VCkIjj+7uSrHq9vtp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 234ae080b7834ff4af76d1259da42432
Files
-
234ae080b7834ff4af76d1259da42432.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rawdat Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE