Static task
static1
Behavioral task
behavioral1
Sample
2665fcf2e59297ca1b38e35fe1076cd9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2665fcf2e59297ca1b38e35fe1076cd9.exe
Resource
win10v2004-20231215-en
General
-
Target
2665fcf2e59297ca1b38e35fe1076cd9
-
Size
58KB
-
MD5
2665fcf2e59297ca1b38e35fe1076cd9
-
SHA1
fe3295b0a154a5b15286fe0757227c26257d585d
-
SHA256
7dfd18d9ef5ccc752d8670b5862e078ca76a7a51faf81a86e7b24279acfebfa8
-
SHA512
fc968c2acf869cd628a2c66366b41bbc7eeb68cc66b51d27b9a096104570f06ce02005b0593584dcb703b0ed61f0e6dbff6356bb55f54fa1544e6eda3f4c3a20
-
SSDEEP
768:4evFIYm0on6HGavZUtQPfoaFNnioNQpMGYxRY8vDckrR0gz9KjqjOYxwA3eyLt4/:5cV6HGavhgaTrY4cklCOj3SYLt4pSXM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2665fcf2e59297ca1b38e35fe1076cd9
Files
-
2665fcf2e59297ca1b38e35fe1076cd9.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ