Static task
static1
Behavioral task
behavioral1
Sample
254c074fc9339b96ea2d47070c50e89b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
254c074fc9339b96ea2d47070c50e89b.exe
Resource
win10v2004-20231222-en
General
-
Target
254c074fc9339b96ea2d47070c50e89b
-
Size
123KB
-
MD5
254c074fc9339b96ea2d47070c50e89b
-
SHA1
d74aa9369d571725e8d7f160c26158097513ebf7
-
SHA256
25d19c2b51c5161f7dd6d06b935668bc83094adeea05dede4e1fea6ef30bebb7
-
SHA512
7ffe4768fd28f52672e9a93b2d386e534f5cb74492377c96f5e6e846369dd15bae7836ba0df29d5a4a58c139947d30a94e7183759585e93564ce3d0a0896c094
-
SSDEEP
768:QwbXSXbmplcVPK6TRs0Iuftgia98w98WCf5tdZblvxK+TR45MUfnm2lq87OYimMO:XubmplcVtuZuVgiBwnChplI+TRh2nyy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 254c074fc9339b96ea2d47070c50e89b
Files
-
254c074fc9339b96ea2d47070c50e89b.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nmnmitm Size: 68KB - Virtual size: 68KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE