Static task
static1
Behavioral task
behavioral1
Sample
64c1bc7226fef545ac94d78820a7caa4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64c1bc7226fef545ac94d78820a7caa4.exe
Resource
win10v2004-20231215-en
General
-
Target
64c1bc7226fef545ac94d78820a7caa4
-
Size
115KB
-
MD5
64c1bc7226fef545ac94d78820a7caa4
-
SHA1
29ab3df466437af8d162fc0d006432dc236da9e3
-
SHA256
9b8fa48f293cc6da25a885a400c884369864bb68b0bd342e02b96ef106c9667e
-
SHA512
fb84e059a04bb93da38f0d7c4cd6161b64fe8bb3f8c6a8011813c3ee989d09026a0d6173b351238accbd5a3aa22ad225aa269cb099c9cb94f32f12260a78a7a8
-
SSDEEP
3072:V4bFNXy7WbaScRRCckpWL7dxfga6V7fKfpOx3Gcgv8:VMNvqbCcksLRtAuxO48
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64c1bc7226fef545ac94d78820a7caa4
Files
-
64c1bc7226fef545ac94d78820a7caa4.exe windows:4 windows x86 arch:x86
309a380349bc41a98d6b3e576a95d6dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetWaitableTimer
WriteConsoleInputVDMA
GetPrivateProfileStringA
GetCurrentDirectoryA
UnregisterWaitEx
SetComputerNameExW
VirtualAlloc
InterlockedIncrement
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE