Static task
static1
Behavioral task
behavioral1
Sample
35212d6256a04fc5e0ece3985f15396b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
35212d6256a04fc5e0ece3985f15396b.exe
Resource
win10v2004-20231215-en
General
-
Target
35212d6256a04fc5e0ece3985f15396b.exe
-
Size
150KB
-
MD5
35212d6256a04fc5e0ece3985f15396b
-
SHA1
cec766f69d2bbfa0260c7ad3ddb2ac131f193e8e
-
SHA256
14e9f6b17758c84db9a2cc42f99ee091de58922a796c343cff0f5ed3d3cd8835
-
SHA512
19be7faa18081be4c44050a54d26ea662dae8220f0ab093a5dd659ba4ccab37ff57a221155bb7ab3a841d23ef5859b67ebbfda497d620565dd9eff8bc7347f93
-
SSDEEP
3072:/VhUTNt0TSmLGkhjKXFvIGk6H0ydpZTr5iSTNL9cEVz3CiODcRwZV:dkt0TSZkhWVvI+UupZTr5iSVrLmck
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35212d6256a04fc5e0ece3985f15396b.exe
Files
-
35212d6256a04fc5e0ece3985f15396b.exe.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 140KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE