Static task
static1
Behavioral task
behavioral1
Sample
26709294b14c9466e754c367c3704844.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26709294b14c9466e754c367c3704844.exe
Resource
win10v2004-20231215-en
General
-
Target
26709294b14c9466e754c367c3704844
-
Size
58KB
-
MD5
26709294b14c9466e754c367c3704844
-
SHA1
07abadd396fba7ff03279072ab1ed1c654089ee7
-
SHA256
c6438204819d54ceb6b5278f7db034ccd196fa316a17f60ecc57344062ff7968
-
SHA512
d885cda706b8fb4da26b8fe845b605928958f7547921a207ec877d1436dd93f28f1fff9b9d4d643f5c31447f58d9c24406128d794bba670702ecaccaed16a427
-
SSDEEP
1536:9TdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5lGjxmsK7pr:Fdy0znnbpDlszS1m3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26709294b14c9466e754c367c3704844
Files
-
26709294b14c9466e754c367c3704844.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE