Static task
static1
Behavioral task
behavioral1
Sample
5c074dc200c763273bab8c9fdf2d29b3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
5c074dc200c763273bab8c9fdf2d29b3.exe
Resource
win10v2004-20231215-en
General
-
Target
5c074dc200c763273bab8c9fdf2d29b3
-
Size
546KB
-
MD5
5c074dc200c763273bab8c9fdf2d29b3
-
SHA1
26e0a4cd9fb4d0f112acc8d6d1a00717e23a3265
-
SHA256
e8b4db7de802df29dcf55d741c38cdd89ac2c7f844e8d47897fdf43b1a91034b
-
SHA512
f909f0015956458abe3e7f1a6c9b296c79331d21153d70f1d11c60acd044f718da3ee3d542adda7c8c794feee0d37d4b0b94aa84faec1644648ce5c65ee7467d
-
SSDEEP
12288:iJ8nqEpTtT8PCCD3klZgcbcod3mELV9BOWxaRPX:ZqEkAlZg903mER9BZxA/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c074dc200c763273bab8c9fdf2d29b3
Files
-
5c074dc200c763273bab8c9fdf2d29b3.exe windows:4 windows x86 arch:x86
f0aed4f566840a701ae1beb9657c41d5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
DefWindowProcA
Sections
heat.ray Size: - Virtual size: 1.5MB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
heat.ray Size: 545KB - Virtual size: 548KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE