Static task
static1
Behavioral task
behavioral1
Sample
578ca105cd13075fb259939dd712d5c3.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
578ca105cd13075fb259939dd712d5c3.exe
Resource
win10v2004-20231215-en
General
-
Target
578ca105cd13075fb259939dd712d5c3
-
Size
12KB
-
MD5
578ca105cd13075fb259939dd712d5c3
-
SHA1
3ee71240d5d84d2298052097f63b8b8aa3878896
-
SHA256
1ab950fd090c6c665a7790bd9c1c922e53a5b3aaee71bafd533121690f8203ab
-
SHA512
4de77eca871416ddfb7fd9f336db1f8c409afaefe120cca596f507dbfc2dc9ad6a0e52e9b80e1c85fce36a8956fcc0a8e8b67c24be8a312de74213c542c627e8
-
SSDEEP
48:6VXmHhkLE2CIK37Qh3xCqHM9KIvzX/MdpUewGlIVSDG/IxwJtWkxlrF/ouw7EK6R:cG29hCqIxSeIx+doJ71yQtQKQYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 578ca105cd13075fb259939dd712d5c3
Files
-
578ca105cd13075fb259939dd712d5c3.exe windows:4 windows x86 arch:x86
c162473f2b23a9ebcac3fd8a0fcf7b1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDCEx
kernel32
CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject
gdi32
EnumFontsA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ