Static task
static1
Behavioral task
behavioral1
Sample
240500ef8281124a2a34957aec437b51.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
240500ef8281124a2a34957aec437b51.exe
Resource
win10v2004-20231215-en
General
-
Target
240500ef8281124a2a34957aec437b51
-
Size
132KB
-
MD5
240500ef8281124a2a34957aec437b51
-
SHA1
04b78232151e8e0688c7f7af7fafe7c6181a6ddd
-
SHA256
7114d33d76354f3a0c6bb376c682a353c466d0aabb0a3a8e1766ac1b71a21a5d
-
SHA512
163fbd15259c2b67bb66501af8347e2af96dee8c88456db39e5a79fef27f1556d36cfb4d78c2a03635a659934440a0ad77bd74091199d95f7baa989f1a6e03ff
-
SSDEEP
1536:vI17aKyOZ4p4zvBfURL/Sp8xYsMajY411a7Ea6mmDn+SW8JJlLDDeEb3cckXf6Ki:g1r++voTpYsI41s91gs8JL7/EexkgSd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 240500ef8281124a2a34957aec437b51
Files
-
240500ef8281124a2a34957aec437b51.exe windows:4 windows x86 arch:x86
24155db14275ba419995852a5d4c8ad5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessShutdownParameters
FindFirstFileExA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
data Size: 8KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ