Static task
static1
Behavioral task
behavioral1
Sample
37a085c56bfc4e7d33de4dcc722ce5b9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37a085c56bfc4e7d33de4dcc722ce5b9.exe
Resource
win10v2004-20231222-en
General
-
Target
37a085c56bfc4e7d33de4dcc722ce5b9
-
Size
195KB
-
MD5
37a085c56bfc4e7d33de4dcc722ce5b9
-
SHA1
da768c7f6ae0750a2b43560bfc0d02531f738020
-
SHA256
e390a4bc80173ef39d69f5f13cbe7dc94aabcdc79815dfd21e16f22cbb04faed
-
SHA512
2d91a7f2f21a4920016c833844e702ea869aec23d24ff73c9721b154d8ebd55a5e5412fc004db754360050647d2d65eb8f118d64434d80759ee8f658ab87b9eb
-
SSDEEP
3072:/koQgogfzCk5//9BW6O2OOBMWGXHb1YEdIksO3kzNR57QfktvsNpZ39Z+rSf81jU:MIDlHW3ZW8bne57QfCkNPSSUBQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37a085c56bfc4e7d33de4dcc722ce5b9
Files
-
37a085c56bfc4e7d33de4dcc722ce5b9.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 58KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE