Static task
static1
Behavioral task
behavioral1
Sample
57c4d8a51fc1cc5e3d4efd583ff0346c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
57c4d8a51fc1cc5e3d4efd583ff0346c.exe
Resource
win10v2004-20231215-en
General
-
Target
57c4d8a51fc1cc5e3d4efd583ff0346c
-
Size
95KB
-
MD5
57c4d8a51fc1cc5e3d4efd583ff0346c
-
SHA1
ebe39e296e64597249da17f5dcf7c79f4add9a81
-
SHA256
84a682db66417acc7e6163f897d0cbdb99900fa7ea357b3285d7dc6262b7fb7b
-
SHA512
506f9d3d49249f5ccef76cd4770935097dabf91552db5c0798d3e56429cac7eed81686c9cea72914d19cd3eaa4d3a6bc9318cbb04af65dd286d606c4424ed84b
-
SSDEEP
1536:ESfGPYOv6u3mtvIV2HU7kkqbM8vlxhdvf9DbQrMrOS6fKZ4J27Js7z5:5fGPD2W7kkSvbrf9DUrMrt6t2Nw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57c4d8a51fc1cc5e3d4efd583ff0346c
Files
-
57c4d8a51fc1cc5e3d4efd583ff0346c.exe windows:4 windows x86 arch:x86
24734dd2e70099b3dbbd6bd67280238f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
wsprintfA
ole32
OleInitialize
oleaut32
LoadTypeLi
Sections
.PACKMAN Size: - Virtual size: 188KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 79KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE