Static task
static1
Behavioral task
behavioral1
Sample
2436d6117e17051c3b01c736a964f13e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2436d6117e17051c3b01c736a964f13e.exe
Resource
win10v2004-20231222-en
General
-
Target
2436d6117e17051c3b01c736a964f13e
-
Size
43KB
-
MD5
2436d6117e17051c3b01c736a964f13e
-
SHA1
29fa9af8a23f8e69cb248d19e46c7845ba4b2d08
-
SHA256
3ae39533ea41f17c7ee6cf9047d5ea5869f830408d64b29844daf6e42a2850a6
-
SHA512
216c610f4d4881e09a057bd3bff78a5282c85442ffc8bd6e2481166e7beed5d16e09883f47a1702d24813de2a9c1f32ccbfafc2eb66a3e2ee2c1b5d8ec42341d
-
SSDEEP
768:LrmYYP2tSzyetZi+SrYjnziaJapuZMetzDiYyNC22OypQf:LyVDhtZg1aJ5/iRq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2436d6117e17051c3b01c736a964f13e
Files
-
2436d6117e17051c3b01c736a964f13e.exe windows:4 windows x86 arch:x86
330ae68fd35ae99521a0ac6a1fd9b999
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.conf Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ