Static task
static1
Behavioral task
behavioral1
Sample
276f87ca82db99f20d5579962870bc5f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
276f87ca82db99f20d5579962870bc5f.exe
Resource
win10v2004-20231215-en
General
-
Target
276f87ca82db99f20d5579962870bc5f
-
Size
80KB
-
MD5
276f87ca82db99f20d5579962870bc5f
-
SHA1
92c9daa3b6c233c092987410820fd8505174df74
-
SHA256
0299232104b8d1e64cd4d97bf93385ee4192b012ab696c703c424507203363ac
-
SHA512
281099c2903b35aed18a90f28650225a40c472a1222a54f4e6690429bcb523d073d60a2a78b964fdfe3f85bd0219eb4022ae0cd4ecad4e0709242133a0336a2b
-
SSDEEP
1536:89PzZh1Sis8y9oInP3IlA+pghiwYMO29WGoqsLV3xnb:mP1h1Ly9oInP4lA+mhig/9WGub
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 276f87ca82db99f20d5579962870bc5f
Files
-
276f87ca82db99f20d5579962870bc5f.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
.pklstb Size: 47KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pklstb Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE