Static task
static1
Behavioral task
behavioral1
Sample
51af7450dfd71f77462d0a850ee7fc53.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
51af7450dfd71f77462d0a850ee7fc53.exe
Resource
win10v2004-20231215-en
General
-
Target
51af7450dfd71f77462d0a850ee7fc53
-
Size
1009KB
-
MD5
51af7450dfd71f77462d0a850ee7fc53
-
SHA1
545bb88b23089022d5f429d29cb0f3f0b67dc3e1
-
SHA256
8ae390717fa05121d8571e341da270b17d5e0673eae136478a379d03cb7465ac
-
SHA512
789b88c86ac1321fb733670d31dd0eaf0acc2a87c99ac0668095a8f6eeb1832b5b888c77933dcb4f9f6a83795ce1901b28e9a8caef1b73800c44ddcdc1acea19
-
SSDEEP
24576:KTzQ6Ehygk2ZutYS8Jmyb216q+MsZr+Y:MzUk6ut+tbwF+L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51af7450dfd71f77462d0a850ee7fc53
Files
-
51af7450dfd71f77462d0a850ee7fc53.exe windows:4 windows x86 arch:x86
de557cb6dca70b6c3b56579179718b9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
OleIconToCursor
VarI1FromUI1
kernel32
ExitProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
InterlockedIncrement
MultiByteToWideChar
TerminateProcess
Sections
.text Size: 874KB - Virtual size: 873KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.version Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ