Static task
static1
Behavioral task
behavioral1
Sample
451d1e2e6059c6b6ecbc3f8ace00b9fd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
451d1e2e6059c6b6ecbc3f8ace00b9fd.exe
Resource
win10v2004-20231215-en
General
-
Target
451d1e2e6059c6b6ecbc3f8ace00b9fd
-
Size
34KB
-
MD5
451d1e2e6059c6b6ecbc3f8ace00b9fd
-
SHA1
22793c3501bd9f014113297f3b3558e78de114a1
-
SHA256
1ee4de88ca2a6526fef2b57ebd1e58967ea5a71d1a4cc32a90cd7597ec9049fc
-
SHA512
76e0c9517fe479777d46f10427ad6e90f78f288c50ea6f82041465f6aa664b3e1ae1c56d0901d71ca7a6fbc83bb6dc9a19cfc8c99f9547b9a7340c62c60fc8c8
-
SSDEEP
768:oxrM/dVwyJAsfpMJFe+THBFRt7rgnvQjX1ReNI:orM7A6pMyGFv7rA6XqN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 451d1e2e6059c6b6ecbc3f8ace00b9fd
Files
-
451d1e2e6059c6b6ecbc3f8ace00b9fd.exe windows:4 windows x86 arch:x86
d436c55cc61e4d62b21359ff12be3c38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
MethCallEngine
Sections
.text Size: 13KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE