Static task
static1
Behavioral task
behavioral1
Sample
24fdd140f291fd2b720d9d09f6f90abd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
24fdd140f291fd2b720d9d09f6f90abd.exe
Resource
win10v2004-20231215-en
General
-
Target
24fdd140f291fd2b720d9d09f6f90abd
-
Size
2KB
-
MD5
24fdd140f291fd2b720d9d09f6f90abd
-
SHA1
97a4c3e49e9978847a4c6c34a0cc6f6b2c14c6a7
-
SHA256
8f2c084ea7fa8669e69d4c64648fb3531e9a28680edd5459f1e6bb318d39f7d3
-
SHA512
70bde9be7b07a4da73bc6230e08e90c3081fd18be385f3ff7c7ef66a809ba6d84440304073a8e170593d77dced06e2b702584519151f651d260bb66b5992b3fe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 24fdd140f291fd2b720d9d09f6f90abd
Files
-
24fdd140f291fd2b720d9d09f6f90abd.exe windows:4 windows x86 arch:x86
05bce297a56acf6f2062509d4872efa7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleFileNameA
GetModuleHandleExW
QueueUserAPC
SleepEx
TerminateProcess
CreateThread
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ