Static task
static1
Behavioral task
behavioral1
Sample
523f307188ff8dc3765445a28ff46a9e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
523f307188ff8dc3765445a28ff46a9e.exe
Resource
win10v2004-20231215-en
General
-
Target
523f307188ff8dc3765445a28ff46a9e
-
Size
134KB
-
MD5
523f307188ff8dc3765445a28ff46a9e
-
SHA1
ec3dde1bf86481b0b7b31f8e0367714e550cc62e
-
SHA256
3eade8bab6bf89e0e4ce798630e224796d27a7783d422f7cbae269cbe8364fda
-
SHA512
02cfe8647f824d6073faa94406de02610832af25d639dad45a334deb14c9ec2c3130be381503be752cbb8dcb100ff32312b24911674744895d0f1a2a3d4afee6
-
SSDEEP
3072:ncw9JIpFWgCcw2OPdZm+UyidxE9oVjB1jzt8I0BMT/:RJIpFWgCP/Pb2ymxQK/t8I4Mj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 523f307188ff8dc3765445a28ff46a9e
Files
-
523f307188ff8dc3765445a28ff46a9e.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE