Static task
static1
Behavioral task
behavioral1
Sample
61def29a2650f74ded2eca2bdff78177.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
61def29a2650f74ded2eca2bdff78177.exe
Resource
win10v2004-20231215-en
General
-
Target
61def29a2650f74ded2eca2bdff78177.exe
-
Size
488KB
-
MD5
61def29a2650f74ded2eca2bdff78177
-
SHA1
de5e63f0b25bec37d7ec1b896bddd5449128f648
-
SHA256
46e09681a40e5b3a04b669283f274f12a874ceb1d76232098c785a520e3b2040
-
SHA512
18ba1c94e2c06050385b2a783533dcf0bb9cb82094dfabbd1f8a4165b0517671d523a72a53d5c7537674a1f68cbb54db56bb8d297dd2c8bb24c5707867005695
-
SSDEEP
12288:MKv3M29okT0dcFBrC+6sRGyKHIWGAvbjgev:M+822qf9C+6soyKHIW/vb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 61def29a2650f74ded2eca2bdff78177.exe
Files
-
61def29a2650f74ded2eca2bdff78177.exe.exe windows:4 windows x86 arch:x86
8852b83a61140508e4d404e46ca943cd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlDeactivateActivationContextUnsafeFast
NtCreateSemaphore
user32
GetCaretBlinkTime
GetDialogBaseUnits
GetInputState
Sections
.text Size: 478KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 310B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE