Static task
static1
Behavioral task
behavioral1
Sample
423b930b97cefd19ee84c46806d15615.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
423b930b97cefd19ee84c46806d15615.exe
Resource
win10v2004-20231215-en
General
-
Target
423b930b97cefd19ee84c46806d15615
-
Size
76KB
-
MD5
423b930b97cefd19ee84c46806d15615
-
SHA1
3cedd345200794436f869f5309520c639ed19220
-
SHA256
13a864ea3ed3ff450a606668166d610320fc70fcd0f0d8b123e9ac8be7bc1dc8
-
SHA512
ef620e0a297931875dfd64d0c23e83ccfbfc18f333f3e4269f06a1d0a48eb6849c1bee4011586cc23a73bc0cafae541a67b0e6c38b9562b1561394c4429221c9
-
SSDEEP
1536:+JEprZLdLbine/6zU2j77YaruHpV9j/7q4sSVFUBfjEErxTWDTMqhGKYIZTET8x:+JEprhw+gj7VruHpDPq4VFOfjBkMqhG6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 423b930b97cefd19ee84c46806d15615
Files
-
423b930b97cefd19ee84c46806d15615.exe windows:4 windows x86 arch:x86
68b1ee0b250280f05449acc84bc65812
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumTimeFormatsA
GetCPInfo
SearchPathA
EncodePointer
SetTermsrvAppInstallMode
EnumCalendarInfoExA
UTUnRegister
CancelDeviceWakeupRequest
GetDevicePowerState
SetThreadLocale
GetCurrencyFormatA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE