Static task
static1
Behavioral task
behavioral1
Sample
662a4a4b152f67c13d3b800ead86a578.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
662a4a4b152f67c13d3b800ead86a578.exe
Resource
win10v2004-20231222-en
General
-
Target
662a4a4b152f67c13d3b800ead86a578
-
Size
2KB
-
MD5
662a4a4b152f67c13d3b800ead86a578
-
SHA1
3cc09552cc1a33fddd132aecc0f29733fcfd609e
-
SHA256
f767cdb92057e097cacc03d213505d3f4f5ee222daccf599f78fe799610a9b21
-
SHA512
b206cc2e3e5d4231eed7be836678bc0037b4dc13ec63ad988cc3152e98eec0cd26eda1cb62e5a2dfbe27b5b3aae94bba25605a04dcc0bdc9292553c357068287
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 662a4a4b152f67c13d3b800ead86a578
Files
-
662a4a4b152f67c13d3b800ead86a578.exe windows:4 windows x86 arch:x86
40004688c400f351e09e74eb7080c88b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
ReadFile
GetProcAddress
LoadLibraryA
CloseHandle
ExitProcess
Sections
.text Size: 512B - Virtual size: 251B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 457B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE