Static task
static1
Behavioral task
behavioral1
Sample
64556fba96511df8b7449e7247008886.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64556fba96511df8b7449e7247008886.exe
Resource
win10v2004-20231215-en
General
-
Target
64556fba96511df8b7449e7247008886
-
Size
34KB
-
MD5
64556fba96511df8b7449e7247008886
-
SHA1
fc9c01795b3badc3d9402034609417a4f59c0e9a
-
SHA256
390b1a58816baeddb270bb8f58e42136f1f4cb0636be5fd5c427e30eac59f9eb
-
SHA512
d4d2338cda5851ee81547f7fda1e8f32b2e42bec5b7835accba42eeebe3826a1d54b9c0d1bc0492785aca8dda1da89ddb52ed14fa02e8dea8dc4eb1f5f4b5bff
-
SSDEEP
384:Z7MO04loobMxJNlf7HG6t1mC8bMWYtwWCnrm0A9EFqGVlz6b1iFOVCYBJPHS/7SC:n0GofNd7XHmC8lpQn+Xy1yOgaH1d0WB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64556fba96511df8b7449e7247008886
Files
-
64556fba96511df8b7449e7247008886.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 29KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE