Static task
static1
Behavioral task
behavioral1
Sample
70c1a890aa040b7721f4bb5664f8e3ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70c1a890aa040b7721f4bb5664f8e3ed.exe
Resource
win10v2004-20231215-en
General
-
Target
70c1a890aa040b7721f4bb5664f8e3ed
-
Size
64KB
-
MD5
70c1a890aa040b7721f4bb5664f8e3ed
-
SHA1
420837ac1af14b5b870306e1d53c6932b3953dff
-
SHA256
52ec27e4dfef24d4deed3d4a8cafc631d92d7891e000a3b9676fdf64020d5114
-
SHA512
50cdc37b1758ea6a05b8138b20153ba8cf9ce8d8535f19c58371fa2e2ebe9a611e8084ed95663fe0c4781b6d451a652a8ac3e61a12f2a38556260490ca669368
-
SSDEEP
1536:/IwlY1oWU4VC8CZMjCsiea/IeaPZBVbehvt+i:/G1oNIRj+wfsP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70c1a890aa040b7721f4bb5664f8e3ed
Files
-
70c1a890aa040b7721f4bb5664f8e3ed.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 10KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE