Static task
static1
Behavioral task
behavioral1
Sample
37f244cb6505a3820ad2e2699b83c697.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37f244cb6505a3820ad2e2699b83c697.exe
Resource
win10v2004-20231222-en
General
-
Target
37f244cb6505a3820ad2e2699b83c697
-
Size
3KB
-
MD5
37f244cb6505a3820ad2e2699b83c697
-
SHA1
03d49ee996a9429d24b6afd211d55f561e761e2b
-
SHA256
55a34accf93ba5eb8cdc23a3aea07dc39893cd4cfea6b3515ab89c882d77b490
-
SHA512
c1a74b66e88297c9c85316f866623ad1f46f96a12d0c1310a2e5393b10b6bdd7aa323a12a534eff3c7f46be04c7f14c0032acecce322eb3677a8b6edf3f46611
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f244cb6505a3820ad2e2699b83c697
Files
-
37f244cb6505a3820ad2e2699b83c697.exe windows:5 windows x86 arch:x86
0ec4053ee6878018f4f8bb972f8738e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
CreateMutexW
LoadLibraryW
Sleep
GetTempPathW
GetLastError
GetProcAddress
CloseHandle
Sections
MiniPE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 118B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB