Static task
static1
Behavioral task
behavioral1
Sample
672bc74cc72cc0bdef443cc63cb0dc87.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
672bc74cc72cc0bdef443cc63cb0dc87.exe
Resource
win10v2004-20231222-en
General
-
Target
672bc74cc72cc0bdef443cc63cb0dc87
-
Size
56KB
-
MD5
672bc74cc72cc0bdef443cc63cb0dc87
-
SHA1
7899945a032b45aaef61cfc0311262ca03a2bc0a
-
SHA256
625b5fd8af299c9acd9840c5762395e0e7d3016456556ee1dc1bc75f0e2e4c72
-
SHA512
192ddba8e4480e20d9fdb9fb02f0a27bb07f5ad66d4bb59b47c42d74c197f5f7ff1d7edd40308c67f63526d49862c8c90f41945340e0718d7055f90f16139285
-
SSDEEP
768:YGCV6OOVTEQynyk40FO9P9ZgKRuON91o/spL4OHdic+lm:SV/O5s40mlZgK8wg/GLxHdb+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 672bc74cc72cc0bdef443cc63cb0dc87
Files
-
672bc74cc72cc0bdef443cc63cb0dc87.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 36KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE