Static task
static1
Behavioral task
behavioral1
Sample
42362f0852ccb2f4d7d64bae23bc8127.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42362f0852ccb2f4d7d64bae23bc8127.exe
Resource
win10v2004-20231215-en
General
-
Target
42362f0852ccb2f4d7d64bae23bc8127
-
Size
178KB
-
MD5
42362f0852ccb2f4d7d64bae23bc8127
-
SHA1
7e58199407397ab61a3d74fa54056b97227a65c2
-
SHA256
f92c2bc0e966421537d74a35173a3290055373a4e57d5cad96b1f42a72a52488
-
SHA512
1b9ef8e15ca8201a82e279fb5daa9a40b8984312b7ec0f8dac5d5881983c894814ab273dfe615845d89a4c3ca4ca4b394d33747888bc8170e96fe03dda66d502
-
SSDEEP
3072:E+7yWOojmklQ1aTdo6BHzE3vibTiby3JgsGSvLYLbxq+BVVnoCI:iWOUm8pniqbTSy3JgsREL0+BzjI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42362f0852ccb2f4d7d64bae23bc8127
Files
-
42362f0852ccb2f4d7d64bae23bc8127.exe windows:5 windows x86 arch:x86
7eaeb8de82ab2c893d1195e30cc60321
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
DuplicateToken
Sections
.tyfkn Size: 33KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kvwv Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.toz Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.naz Size: 1024B - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE