Static task
static1
Behavioral task
behavioral1
Sample
659981d87aadccaaefe2f7500b9a9ac0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
659981d87aadccaaefe2f7500b9a9ac0.exe
Resource
win10v2004-20231222-en
General
-
Target
659981d87aadccaaefe2f7500b9a9ac0
-
Size
30KB
-
MD5
659981d87aadccaaefe2f7500b9a9ac0
-
SHA1
1d6aba745430062e585dee7b4bce590fc44e3545
-
SHA256
eecc61bdcae9e7e8b7d47a8d1f30ca9cc21c0690263d6a2518bc9e78fda05815
-
SHA512
9ff9f3d8e0b0ed96bf5f94848beac63b3aa8e31f78cd69a7652da3536afb4f53decbfa68aed5efffea70985fe3e33692ab7a241da22e9228b39f883af58281c4
-
SSDEEP
768:5uFk+/4JokpSWH4Ok6HlJS9by6BCXxpiraZA:5uFL/u/TvkQYRAXjiraK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 659981d87aadccaaefe2f7500b9a9ac0
Files
-
659981d87aadccaaefe2f7500b9a9ac0.exe windows:4 windows x86 arch:x86
710f454264a41a967a3a21098b540598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelIo
user32
PostQuitMessage
SetTimer
SetProcessWindowStation
CloseWindowStation
GetProcessWindowStation
gdi32
GetStockObject
Sections
.text Size: 1024B - Virtual size: 946B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ