Static task
static1
Behavioral task
behavioral1
Sample
2687567a3c8c5e020f4d1bb8b2a72b00.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
2687567a3c8c5e020f4d1bb8b2a72b00.exe
Resource
win10v2004-20231215-en
General
-
Target
2687567a3c8c5e020f4d1bb8b2a72b00
-
Size
441KB
-
MD5
2687567a3c8c5e020f4d1bb8b2a72b00
-
SHA1
28a36033993383745a706454a4b8c51859a97865
-
SHA256
d1559b82b5a2f802d0e5e819fb5c3f8046eedfcc66c28875ba4e6f0a1ee3d14e
-
SHA512
edf4c6298ac68294a78091890ebc97197c6a005e9e09ce492f5a9cfcfd6e008f349585e278ae9a2ab91edbc4cdba7e8d539904e388739568ab9d17e1725d4cf6
-
SSDEEP
6144:hcG2kb+Kdt6TGT3kVrKHXRuq/ce2xFaZ8E40xugx+bPeM40SGxS:jEyT0VrKMgDoC8E4+ug0bvvNx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2687567a3c8c5e020f4d1bb8b2a72b00
Files
-
2687567a3c8c5e020f4d1bb8b2a72b00.exe windows:4 windows x86 arch:x86
d86f3f006ca09d53cf18a5bc224955ae
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LocalHandle
CreateJobSet
GetOEMCP
GetStdHandle
GlobalFree
ReleaseMutex
FindAtomA
CreateMailslotA
GetProfileStringA
EnumDateFormatsA
GetVolumePathNameA
GetProfileIntA
GetTapeStatus
ExitProcess
GetModuleHandleA
GlobalLock
VirtualAlloc
GlobalFlags
GetUserDefaultLangID
GetProcessHeap
user32
GetDC
ReleaseDC
GetParent
EndPaint
GetWindow
DrawEdge
GetClassNameA
RegisterClassA
GetFocus
GetWindowTextLengthA
CloseWindow
GetWindowTextA
GetClassInfoExA
BeginPaint
GetActiveWindow
GetForegroundWindow
ShowWindow
ValidateRect
IsIconic
shell32
SHBrowseForFolderA
SHChangeNotify
SHGetMalloc
SHGetFileInfoA
SHGetFolderPathA
userenv
GetGPOListA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ