Static task
static1
Behavioral task
behavioral1
Sample
4319665bd12ceacd99f2b81be140673c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4319665bd12ceacd99f2b81be140673c.exe
Resource
win10v2004-20231215-en
General
-
Target
4319665bd12ceacd99f2b81be140673c
-
Size
25KB
-
MD5
4319665bd12ceacd99f2b81be140673c
-
SHA1
96eb0f23e028e0e27eb8ee82f9e33dd018566ac4
-
SHA256
03f80c23b31f2f073255ec8c628e1e75dddd02fa8c86c9ea1bb709b88ab673fe
-
SHA512
6e2f3d594f8054bbad7f1004af9a87825ef88bbe6388ccb92990d90aa2b24f10560cf98b0a5cad3e0c9140367cd21c97e7e8e54ebd814301c70508139d8f63da
-
SSDEEP
384:5iUvSrd9LLDvO9UVNHeVCHW1gDg16RcgSZKgDv98wHIcv8FnFGvqF8vFFKFj:QPDW98NHqLa+KqvVockFnFGSF8NFKV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4319665bd12ceacd99f2b81be140673c
Files
-
4319665bd12ceacd99f2b81be140673c.exe windows:4 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
?V�̀.�8 Size: - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3l�[��8� Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
��/���� Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ