Static task
static1
Behavioral task
behavioral1
Sample
434c858b4624e90eb4f65b154fc043ef.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
434c858b4624e90eb4f65b154fc043ef.exe
Resource
win10v2004-20231215-en
General
-
Target
434c858b4624e90eb4f65b154fc043ef
-
Size
3.2MB
-
MD5
434c858b4624e90eb4f65b154fc043ef
-
SHA1
29e8bcfa0c1c28776da1ce35948aef47f1175939
-
SHA256
71e77209f67c2b55c981556e6bbc9f6d6c3f8b9a3bd07488d9e3085042456433
-
SHA512
fe6f460f1096d356ea5633ffc3fbe370a5053dd90c0d36e6178d8d51e7dd1ddd435d0e20cd46a5051cb5e792deba3e37480e8c8224b68c3adc34622ad0b6e4d2
-
SSDEEP
98304:ROZCKr7yGISA3rgAvfjDkB8uNZ4XmReE1K6tzf:ROZRr7rvA3lG/8WZ88D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434c858b4624e90eb4f65b154fc043ef
Files
-
434c858b4624e90eb4f65b154fc043ef.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 374KB - Virtual size: 848KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.8MB - Virtual size: 34.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE