Static task
static1
Behavioral task
behavioral1
Sample
64555c17a8d9b14b1f56111c3cf083d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64555c17a8d9b14b1f56111c3cf083d6.exe
Resource
win10v2004-20231215-en
General
-
Target
64555c17a8d9b14b1f56111c3cf083d6
-
Size
4.1MB
-
MD5
64555c17a8d9b14b1f56111c3cf083d6
-
SHA1
2b2bd2325f2e3c636a04c08ddb46cc3f90b4c418
-
SHA256
c18d0c56ca1e2ccb1367d5c6fbbbba2193034d57e2ed95489c2738482ee762eb
-
SHA512
ef043e03ef3743183a930c7c6e363b9ddacfd8122a698c1214574467bc368f59bcb581eb5f03f790a91516f7fed529b6af39c7ed27806ffffce0dce39d3ef78f
-
SSDEEP
12288:nDHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHH7:nX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64555c17a8d9b14b1f56111c3cf083d6
Files
-
64555c17a8d9b14b1f56111c3cf083d6.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE