Static task
static1
Behavioral task
behavioral1
Sample
24baeb820709fe490b6cce6443e5bedf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24baeb820709fe490b6cce6443e5bedf.exe
Resource
win10v2004-20231222-en
General
-
Target
24baeb820709fe490b6cce6443e5bedf
-
Size
205KB
-
MD5
24baeb820709fe490b6cce6443e5bedf
-
SHA1
f62547bf658ee07a82277cfa0bb3cfa250f28511
-
SHA256
07516c60b2e370fcd06578dd1ef10969339cba60ed2bafbcd418b934f8c96787
-
SHA512
0a673b26f362b2449f350f574bf593c1c1310983d9ecf72f9892614a9eced216044a54d2871883d7b99a84cf7b5b2446cc88855ab661ab9ad55a9781773291b3
-
SSDEEP
3072:EcVqnvmh7dt0SQjdl8ZTDKoqKhbeAADQFN1C1X3ujbV4UOxgtHagCtiWEEw:aCScTMKhbTAoNmX3cV4rxWHtWEEw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24baeb820709fe490b6cce6443e5bedf
Files
-
24baeb820709fe490b6cce6443e5bedf.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.scpack Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ