Static task
static1
Behavioral task
behavioral1
Sample
228c9d9a3d976b00600270a50553fe92.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
228c9d9a3d976b00600270a50553fe92.exe
Resource
win10v2004-20231215-en
General
-
Target
228c9d9a3d976b00600270a50553fe92
-
Size
21KB
-
MD5
228c9d9a3d976b00600270a50553fe92
-
SHA1
9dd85cf9d4c1dee36eaa68adbee211cda99e4b37
-
SHA256
30b8dbde57f2746bcb8518e7cdb13f1e5e9fe5267d3f469a65399a6487b4f041
-
SHA512
e82376db046310e24069465ef576e773d1c500e24ccecb40e3483bbfc6138bcd7b36d80a234c1d1da4437c3b8cc369aebad7cff15bbc8b7335bf86a5bb5479c0
-
SSDEEP
384:dSA2lvjt2R8JcoHQIUrRTvYMzf2F6LQFoXKvB32tNG1QWpqQiS8liR:slv46JcCqrFwS2cXSANGz3iHUR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 228c9d9a3d976b00600270a50553fe92
Files
-
228c9d9a3d976b00600270a50553fe92.exe windows:4 windows x86 arch:x86
33a272d0fa43efe287c363f21d285d8b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
Sleep
ExitProcess
advapi32
RegQueryValueExW
Sections
.text Size: 1024B - Virtual size: 942B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ