Static task
static1
Behavioral task
behavioral1
Sample
23d6e1bc35d9e6e02ffe70e96fa598c8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
23d6e1bc35d9e6e02ffe70e96fa598c8.exe
Resource
win10v2004-20231215-en
General
-
Target
23d6e1bc35d9e6e02ffe70e96fa598c8
-
Size
58KB
-
MD5
23d6e1bc35d9e6e02ffe70e96fa598c8
-
SHA1
0095df989c834d6ed14fc933ab0111587b89f59b
-
SHA256
bdd7b9a8318dc03158f0230b98dad25fd7a0f46c6a2741c862811f4bafdbc8ea
-
SHA512
8bda55dc0cfd60d59286ae439c2ea2df4e88574c10c359868e1083661062517a88dafd11b2bf4b21825d6a550a2a01884c5e943e9db86853e0e3ec1bac27309a
-
SSDEEP
768:hm0on6HGavZUPQffoaFNnioNQpMGZXlFPVrqX9zm3yr53nm5GMuMNCNaAJ:4V6HGavzgamfRK9zm30dnvfM2aS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 23d6e1bc35d9e6e02ffe70e96fa598c8
Files
-
23d6e1bc35d9e6e02ffe70e96fa598c8.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ