Static task
static1
Behavioral task
behavioral1
Sample
446db9e7061690ac085e3558cb255744.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
446db9e7061690ac085e3558cb255744.exe
Resource
win10v2004-20231215-en
General
-
Target
446db9e7061690ac085e3558cb255744
-
Size
89KB
-
MD5
446db9e7061690ac085e3558cb255744
-
SHA1
d67f47f073572651233e5bac45b6a4a7545e0a48
-
SHA256
a16da371b7ead88878d4fdcd69db884e51766fa85c7259f3b2db1a40f9ebec59
-
SHA512
894670518b1c5817133891d89c65604ff61c22637fac1366bd255e1adbebb8f7a67d85ba4862dae93631b71b7aa5a2f7bae78a2aa3f7b9c4398dcd6cf73ae7e0
-
SSDEEP
1536:A7WNnn7rwtpJGLOY+TmX0psW+x8kQsX3vKg4nCsfTEFd00uc2ppPC/bVGFlFzIy8:mWNnuzsOYgU3VX+nCKOd96pPCkXxIy1C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 446db9e7061690ac085e3558cb255744
Files
-
446db9e7061690ac085e3558cb255744.exe windows:4 windows x86 arch:x86
050733a81985180de6c1071f67747e91
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetProcAddress
GetModuleHandleA
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
send
Sections
.code Size: - Virtual size: 440KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 88KB - Virtual size: 92KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE