Static task
static1
Behavioral task
behavioral1
Sample
267e56d43f561081cf40570cc347a92f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
267e56d43f561081cf40570cc347a92f.exe
Resource
win10v2004-20231215-en
General
-
Target
267e56d43f561081cf40570cc347a92f
-
Size
2.6MB
-
MD5
267e56d43f561081cf40570cc347a92f
-
SHA1
74900f50017c51c61e4afbf7d02cd288315a1abc
-
SHA256
e4734dc7cfb4f68379f0f356b4c46d14dda0edc9c8c33c38a63580d14fcde0b7
-
SHA512
6c300712551d29df0af8423d65c8f3b37a62de1eed9106c49b493a88c353fd69d73e4b160453c862bff5da33e3c6255293318f94fa3a6116b98f040e46ecdd0b
-
SSDEEP
49152:5waKKJw7iVlXj5DdAYYfBUIWsFCZ5UKZ0MBmwi5DvQ+RT+p:GKJw0TNdPDfhiiPBmNDY+RT0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 267e56d43f561081cf40570cc347a92f
Files
-
267e56d43f561081cf40570cc347a92f.exe windows:4 windows x86 arch:x86
9c0de90e52c26fa17422e5ce72c5d83f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileStringA
Sections
Size: 1.9MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 988KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hfclwfkp Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lenkkhqs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE