Static task
static1
Behavioral task
behavioral1
Sample
406688b6ba5f25a00ea2798b797046a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
406688b6ba5f25a00ea2798b797046a3.exe
Resource
win10v2004-20231222-en
General
-
Target
406688b6ba5f25a00ea2798b797046a3
-
Size
454KB
-
MD5
406688b6ba5f25a00ea2798b797046a3
-
SHA1
ba062f6c7d9630ba3bfd5d5a0a12a6b0906aa93d
-
SHA256
447a1ac7f2b75cc2a22729cc66aebcf429107c76bd93af175c2536148a95b176
-
SHA512
b5a2fd651e3258b4e623dbf1eb0f221051af08fef8dc7d87c192b176313d746c9a8304f43c203c835ec838fed111716c463bca0840329ab56c9adbccde312171
-
SSDEEP
12288:+dxYXrekrbSZXLQ2ZhOY9U+9UzZlN7NcH5yF0W1buwoHnL6eSoXArhvkN:jbeC0LVZlzELB05o0W1doHL6eSoKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 406688b6ba5f25a00ea2798b797046a3
Files
-
406688b6ba5f25a00ea2798b797046a3.exe windows:5 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 38KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.svkp Size: 129KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE