Static task
static1
Behavioral task
behavioral1
Sample
54fd18487036ed920ba2c709d0e08140.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
54fd18487036ed920ba2c709d0e08140.exe
Resource
win10v2004-20231215-en
General
-
Target
54fd18487036ed920ba2c709d0e08140
-
Size
31KB
-
MD5
54fd18487036ed920ba2c709d0e08140
-
SHA1
0707aa6fd56eed8ca99ae3dd05b706beaacc3a01
-
SHA256
6c0500777810d95ae34a634c1da09e433b25afc74bbff209191d8007a1dbabfa
-
SHA512
03466f76717c1ba8a7bcbb73fe41f7334e1c81bd4b1086a5beda4a83ccd416ec4f87c6692f9a84281d8c2ff2ced9664c2ef4f1ab140828241a146e262e18ce83
-
SSDEEP
768:P1Yx7TzWB4iyfTeiZiVWShwE0nj0L7rTLu9fgUV:iJ1nE0j8rTa9L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 54fd18487036ed920ba2c709d0e08140
Files
-
54fd18487036ed920ba2c709d0e08140.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.uext Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ