Static task
static1
Behavioral task
behavioral1
Sample
689417a2cff80e50ef6495d400924dd1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
689417a2cff80e50ef6495d400924dd1.exe
Resource
win10v2004-20231222-en
General
-
Target
689417a2cff80e50ef6495d400924dd1
-
Size
12KB
-
MD5
689417a2cff80e50ef6495d400924dd1
-
SHA1
dc3a793b7a12cc3cc92e1618f7b611d26c5ba7f9
-
SHA256
f40adbc263ee72f798f4bb79457853184517f18723de9df77ee3f980d20900ac
-
SHA512
cff513e89ea17e2229ea7650b0101d01782180f77993ff681d94eeb288112f64eff03dcd80ac4937903a8f697fc59c29b698ee497314ea40820b6332e40e5ebc
-
SSDEEP
96:W9Qm19Oz4D6nJ3brfP/aN+NeL+3zq/w4cqMQ:SQmL04Y3bjaN+Z0+RQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 689417a2cff80e50ef6495d400924dd1
Files
-
689417a2cff80e50ef6495d400924dd1.exe windows:4 windows x86 arch:x86
1b1d083291417e9b2ed712a577a01f1d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetClassLongA
DestroyWindow
kernel32
GetLastError
SleepEx
Sleep
CreateThread
ExitProcess
QueueUserAPC
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 320B - Virtual size: 278B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ