Static task
static1
Behavioral task
behavioral1
Sample
42f551209fd490c85c51ea76bef9e3d7.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
42f551209fd490c85c51ea76bef9e3d7.exe
Resource
win10v2004-20231222-en
General
-
Target
42f551209fd490c85c51ea76bef9e3d7
-
Size
375KB
-
MD5
42f551209fd490c85c51ea76bef9e3d7
-
SHA1
c3e7c539e548a0c7627a28ea59316e0da65bf297
-
SHA256
cf7f89f545a77546324acdf1ca20880d51838f278c9ff9ec5e646aaf5b116b89
-
SHA512
cc6f87645ed39ee32deeb69f45e6f7a937e5b6ce7716b7b7c83573b8c565949eef91922956f1b25f2c8f2a1b712cf1b92effd1a7745c6aa558dba7b684857320
-
SSDEEP
6144:6RDWcoxoduxHo5vATA6WwwnkkzOlfbhor9uhro3Xy7geX1itpjyOWdoAMawog3uu:6RWNGlAk6WwMkFbGgROi7geX1ilBAMaE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42f551209fd490c85c51ea76bef9e3d7
Files
-
42f551209fd490c85c51ea76bef9e3d7.exe windows:4 windows x86 arch:x86
057042abdc5e5cbb0b9064b12ef624e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
SignalObjectAndWait
BackupSeek
ExitProcess
SetConsoleTextAttribute
SetConsoleLocalEUDC
GetNamedPipeInfo
CreateFileA
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
itext Size: 4KB - Virtual size: 1020KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
text Size: 349KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ