Static task
static1
Behavioral task
behavioral1
Sample
5006318ae7fbcca37d7749479aa4d60d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5006318ae7fbcca37d7749479aa4d60d.exe
Resource
win10v2004-20231215-en
General
-
Target
5006318ae7fbcca37d7749479aa4d60d
-
Size
47KB
-
MD5
5006318ae7fbcca37d7749479aa4d60d
-
SHA1
ea43d05b40996990629897c0aa9b2bf732c71ed6
-
SHA256
77e8ace7169f69c1ad9bceeb6603c85a3bb59e7b23bfcdfa46efa4ec97eb6ac0
-
SHA512
991cd34a57aefd1003a8961b3219f75d71d73abe14a369f1ffe6f755c57823ce293ea3d3557e888005c8aa45ddbf6e01cb21a6d8fbeeb9b6bab37e5bc9bb6f9a
-
SSDEEP
768:YDCAVVc81/aKsHlc/0A/wbl2pKr220sB79p21nWpHSM35sxaspZ6QrOBXPexlDfC:1AVVtpylc/0bcElB79k1nJM3uxzAQrHG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5006318ae7fbcca37d7749479aa4d60d
Files
-
5006318ae7fbcca37d7749479aa4d60d.exe windows:4 windows x86 arch:x86
b71d8c1931cb0a297806c1529ed52c6b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle
Sections
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE