Static task
static1
Behavioral task
behavioral1
Sample
22aff5eaaa19df3e9fb1d9901f9d3258.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22aff5eaaa19df3e9fb1d9901f9d3258.exe
Resource
win10v2004-20231222-en
General
-
Target
22aff5eaaa19df3e9fb1d9901f9d3258
-
Size
27KB
-
MD5
22aff5eaaa19df3e9fb1d9901f9d3258
-
SHA1
c637f4490aff8ce48a6677b25aaf16d8acfb2780
-
SHA256
6ae1671485edd933307a5bc878c89ef672060d42a86e3c8ffa54d6285581255c
-
SHA512
addc5dc9519794df6a16abd28811f476ba21590764c3b6913e24a334dda192280638869e68cd55b9d763491bec2de0900d20850c4b34b7fb1b16499434e228c1
-
SSDEEP
384:P9PKqrsrfJ+aqVsCPs4+9EIGCNqXC6lHf4zWulY4nRwKtOqX8HYZ1DHS3qsKlqxZ:PhFpVsI4EI/d6RHqY0htOqPDqqsKlcr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22aff5eaaa19df3e9fb1d9901f9d3258
Files
-
22aff5eaaa19df3e9fb1d9901f9d3258.exe windows:4 windows x86 arch:x86
541160bce55bf5030f1053d9ca2f310b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
kernel32
ExitProcess
Sections
.code Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE