Static task
static1
Behavioral task
behavioral1
Sample
4c31a965e84a2ec3c07051bd2b787e94.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c31a965e84a2ec3c07051bd2b787e94.exe
Resource
win10v2004-20231222-en
General
-
Target
4c31a965e84a2ec3c07051bd2b787e94
-
Size
65KB
-
MD5
4c31a965e84a2ec3c07051bd2b787e94
-
SHA1
dacd916cfa946b1a58f94eaa53e46abb9237bba1
-
SHA256
7f149b25f7419a10f4fa0482404db5823fe477f996f39868be480fe07a48ec99
-
SHA512
2f12fc4a5d843d265239da1e0d3865cfb8079635e4f9971aef14e82b28241818392ce0afe421f5180a3afc1775b77ee9e4ed19c82bd97d1bdf0c58a5faad46eb
-
SSDEEP
768:FevFIYm0on6HGavZRtQffoaFNnioeQprGQ8Boarpyb2h8cSxSh69hz8trYA8wqRP:QcV6HGavqgaFb2hPSNzerDXG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c31a965e84a2ec3c07051bd2b787e94
Files
-
4c31a965e84a2ec3c07051bd2b787e94.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ