Static task
static1
Behavioral task
behavioral1
Sample
51e27d7da0c5cec4a97f7ad90cd3cdc4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
51e27d7da0c5cec4a97f7ad90cd3cdc4.exe
Resource
win10v2004-20231215-en
General
-
Target
51e27d7da0c5cec4a97f7ad90cd3cdc4
-
Size
76KB
-
MD5
51e27d7da0c5cec4a97f7ad90cd3cdc4
-
SHA1
805c8de3a0452db4e591dabf2f0be0db792978ce
-
SHA256
06fa1744220b69d9494c35a7681aa791c247da065b4b1d10223041b64c264d8f
-
SHA512
d58451cbae6eefe61a3c00a8312c9779cb6c8cb5a633fe2ef92e2ad77c07834fc7334925838b2f9d4e239921e1c1a52d596d4c70cd250162d632bd96d5b2c65a
-
SSDEEP
1536:GjsFO2XIiG8J8Q9HdTriT7tlnvkc33jv+QgbUem7ggsaMpjVrs2ryrd1vUQuq6:GjsPXIi1Bm/bv3zv+lU5c6MHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51e27d7da0c5cec4a97f7ad90cd3cdc4
Files
-
51e27d7da0c5cec4a97f7ad90cd3cdc4.exe windows:4 windows x86 arch:x86
2531be2d5e92f1fbaf8c680a30034715
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryDosDeviceW
LocalShrink
ExtendVirtualBuffer
GetDefaultCommConfigA
SearchPathW
VDMConsoleOperation
UnregisterWaitEx
GetFileAttributesA
FlushFileBuffers
SetFilePointer
PrepareTape
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE