Static task
static1
Behavioral task
behavioral1
Sample
561feff4b9df4f5dfb84d0282f013b2f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
561feff4b9df4f5dfb84d0282f013b2f.exe
Resource
win10v2004-20231215-en
General
-
Target
561feff4b9df4f5dfb84d0282f013b2f
-
Size
87KB
-
MD5
561feff4b9df4f5dfb84d0282f013b2f
-
SHA1
48c292af4b058047569d5b5cbb330176e85f5d5d
-
SHA256
b8a074b632474454f9726e23efab77d1c1a33bb5f875cfb5e6621a09625aaf20
-
SHA512
29c5f70aa1377a2bcd48cdeb4c5e3b531b92c4f9e3d54f942dbd13bef3c4a3d21fc7b253efc7a09054fca7fb5d632e2647d2f7ee738368c823acad99899c59dc
-
SSDEEP
1536:ZEPZ6X0Ez78jmLdFNHFPbiBqa1R8XhCR/53e6aIBIoAwIfRnCAN5t4hf:ZEQp78KLthiRR8X0SzIGoAvnvS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 561feff4b9df4f5dfb84d0282f013b2f
Files
-
561feff4b9df4f5dfb84d0282f013b2f.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
*Xi$8X#5 Size: 27KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
*Xi$8X#5 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
*Xi$8X#5 Size: 6KB - Virtual size: 356KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
*Xi$8X#5 Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE