Static task
static1
Behavioral task
behavioral1
Sample
42dd276472535f8b3244f1fc4f94a6c5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42dd276472535f8b3244f1fc4f94a6c5.exe
Resource
win10v2004-20231215-en
General
-
Target
42dd276472535f8b3244f1fc4f94a6c5
-
Size
88KB
-
MD5
42dd276472535f8b3244f1fc4f94a6c5
-
SHA1
54673a5ad57e77501f5f81fe0328c40dbea5e9d2
-
SHA256
13cd7f66ba8cf40bb735f521dbb63a7554aa3366a0235fddf4e71734affdcd22
-
SHA512
ccba89e38daa52bd9eb348a75faea2d74687ae7794f47091d71525480fce2adaf0d98ee26dc19a536a9a59073e0bf272eb5a41d2d95a27c72ecd3ba69f91f32e
-
SSDEEP
1536:Ao+dhpnDAfBaxK1jyIRS5C1LjP8BjPjPjPjPjPjDYTBTune800H:AoOpnDAfB+K1FS81LjPUjPjPjPjPjPjD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42dd276472535f8b3244f1fc4f94a6c5
Files
-
42dd276472535f8b3244f1fc4f94a6c5.exe windows:4 windows x86 arch:x86
7a9fd780b3a18032d737bfda6abc2584
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord654
ord280
ord855
ord415
ord827
ord312
ord843
ord864
ord205
ord842
ord160
ord766
ord841
ord758
ord284
ord409
ord846
ord365
ord858
ord722
ord377
ord798
ord849
ord360
ord397
ord441
ord318
ord551
ord550
ord447
ord444
ord553
ord793
ord509
ord513
ord822
ord795
ord511
ord512
ord560
ord565
ord443
ord811
ord406
ord329
ord476
ord419
ord248
ord765
ord346
ord657
ord784
ord395
ord304
ord594
ord362
ord305
ord364
user32
ord566
ord303
ord429
ord54
ord396
ord57
ord515
ord183
ord254
ord405
ord407
ord145
ord319
ord235
ord91
ord79
ord81
ord143
ord525
ord498
ord334
ord232
ord330
ord624
ord23
ord488
ord163
ord247
ord316
ord181
ord559
ord386
ord463
ord503
ord252
ord526
ord415
ord645
shell32
ord266
ord285
ord288
comctl32
ord5
ord17
winmm
ord142
facehelp
ord37
ord8
ord30
ord7
ord1
ord5
ord25
ord12
ord20
ord15
ord17
ord35
ord34
ord6
ord9
ord32
ord29
ord22
ord33
ord11
ord21
ord13
avcdrom
ord51
ord55
ord53
ord54
cdecoder
ord1
encmpa
ord11
ord5
ord9
ord8
ord7
ord6
ord4
ord3
ord2
ord1
gdi32
ord206
ord371
ord378
ord326
ord176
ord329
ord161
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE