Static task
static1
Behavioral task
behavioral1
Sample
67c7f071fa1b03db4226ada472d8bf0d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
67c7f071fa1b03db4226ada472d8bf0d.exe
Resource
win10v2004-20231215-en
General
-
Target
67c7f071fa1b03db4226ada472d8bf0d
-
Size
91KB
-
MD5
67c7f071fa1b03db4226ada472d8bf0d
-
SHA1
742a36adff2e692ea84317ee2f566493074a0720
-
SHA256
edc489c895989cafce59475da57769ea468766468fab7c168ed7b8b51d93452c
-
SHA512
9227aa4edb2ee9a791e4bd94185301d2beef43cf0b727c15298bd17269a0481498db332401d682f5986ffc13f3ad1ae0f6440141a6be3099af7ad26a5506c3ef
-
SSDEEP
1536:1Hn49J/DTJNNZUScvP09Bpvf4pk0nICW/7HwSbJLqH/kc+p2ka10aUUR1Gkde:l49J/xrCjU9BAC/7HKmpu1FX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 67c7f071fa1b03db4226ada472d8bf0d
Files
-
67c7f071fa1b03db4226ada472d8bf0d.exe windows:4 windows x86 arch:x86
eea065d607404f82272b51bece735ef0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
VDMConsoleOperation
GetSystemInfo
lstrcpyA
TlsAlloc
CreateFileW
GetTempPathA
SetErrorMode
WTSGetActiveConsoleSessionId
ResetWriteWatch
OpenMutexA
AreFileApisANSI
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 67KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE