Static task
static1
Behavioral task
behavioral1
Sample
10f5d5ff2b164c869b8d02c5a62e485e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
10f5d5ff2b164c869b8d02c5a62e485e.exe
Resource
win10v2004-20231215-en
General
-
Target
10f5d5ff2b164c869b8d02c5a62e485e.exe
-
Size
402KB
-
MD5
10f5d5ff2b164c869b8d02c5a62e485e
-
SHA1
897f84253b0838dcf7e3293e2a6fee96fcbb302c
-
SHA256
bbd97783d58676f494d21002cdaf4c6a54d3e5fee0ec1a10b8b539e9a14f5c6b
-
SHA512
0c6b83018f40abba9a977816e1daad9b14238793bf77d6de89ed624c0e5e58b87a6573f0b107f08c5d893351c98aa3afbab82f090f9cc62b15e25fbbfff4dc27
-
SSDEEP
6144:/uNcWd8ZpXDAZsWvswkyH5U6ODA8EJuoMdVnw4Ow8/tRv18qW2aVaEMY:wd8Z1DAZPvsNd1k8EJuoMdVwdz1p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10f5d5ff2b164c869b8d02c5a62e485e.exe
Files
-
10f5d5ff2b164c869b8d02c5a62e485e.exe.exe windows:4 windows x86 arch:x86
3fb863511ecb4e025ef3c40c2a305caa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord517
Sections
.text Size: 396KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
cxLMICX0 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ