Static task
static1
Behavioral task
behavioral1
Sample
6477b9d06f573353bd2ee5cc2079f2ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6477b9d06f573353bd2ee5cc2079f2ee.exe
Resource
win10v2004-20231215-en
General
-
Target
6477b9d06f573353bd2ee5cc2079f2ee
-
Size
113KB
-
MD5
6477b9d06f573353bd2ee5cc2079f2ee
-
SHA1
1ab2380b8a47bab5d748950e7edaaeb479f0666b
-
SHA256
942f9307ebce454b8777e60090e0f0ad75627e7fcbca7f411d62179f2b73f65b
-
SHA512
01b7f3b8b40cc603926182997a1852416f55214a3eed6d0d803c00dd5a708f7f0b61c5ffbe84b10ba921503817ac98ee6dba9d3c35e8cbde14f5e63fb84d27ce
-
SSDEEP
192:4DKfw2fJmGS7shmv6SJ4nG63BUFa3D1PkZ41GbwJ0NspfoZensgoP1eUEtF2qkRF:Y2fAGgsYv6SAxUQkS+tP1eU4FPkF4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6477b9d06f573353bd2ee5cc2079f2ee
Files
-
6477b9d06f573353bd2ee5cc2079f2ee.exe windows:4 windows x86 arch:x86
119ba01abad812c4a461368344bcd6cd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
RtlZeroMemory
VirtualAlloc
VirtualFree
VirtualProtect
Sections
. Size: 7KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
c2sa Size: 104KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE