Static task
static1
Behavioral task
behavioral1
Sample
661316f25be0a2e01776855f50a6ac05.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
661316f25be0a2e01776855f50a6ac05.exe
Resource
win10v2004-20231215-en
General
-
Target
661316f25be0a2e01776855f50a6ac05
-
Size
319KB
-
MD5
661316f25be0a2e01776855f50a6ac05
-
SHA1
26819af1d531d38ca9f726faa4a10e37626cd8ba
-
SHA256
37817b3f7a3d69fbfe3b6a5aa40778f266eb6578b2c28aaa9b35d7440fb86585
-
SHA512
89ffbc7b96f9f90707cdff8b34e5bc5cf056b36acaf4ea1ac8deddccf1ba89e6153f31a7f621bec0d702b78c1debe5074793ede22f37cf6d8035f3308af76539
-
SSDEEP
6144:36dFyceFNwshoBKAAf7ME8bbwEMvwBxvCT+rBRMYKW8ATSA+XcCeA:36LSwsmUZ8bEKLRMYmbX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 661316f25be0a2e01776855f50a6ac05
Files
-
661316f25be0a2e01776855f50a6ac05.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
Size: 214KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 12KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 99KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE