Static task
static1
Behavioral task
behavioral1
Sample
70d3a737190e320755601c1706585a5c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70d3a737190e320755601c1706585a5c.exe
Resource
win10v2004-20231222-en
General
-
Target
70d3a737190e320755601c1706585a5c
-
Size
56KB
-
MD5
70d3a737190e320755601c1706585a5c
-
SHA1
2aa593ebefe4bf14efc70af762e149e5d9f6c067
-
SHA256
6d1b9df5b74867fcd8dc82f30a65851ea088fdb2b64b0d0097b6a4c70f238edf
-
SHA512
e9e9a4348bdcfbbf9502da5557e237ead16a5822bee31b3bc5c6b5104234654017c8a0bca72fefa65289890b88501330a69d6dedefce54f0591df049e1d3c998
-
SSDEEP
768:uX+IjbJ4fcd3eWsiskPi67SkE/+FqQaipbgEW82E2Uaq7v:uX+IXJp3ednUi67bE/K7aipT2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70d3a737190e320755601c1706585a5c
Files
-
70d3a737190e320755601c1706585a5c.exe windows:4 windows x86 arch:x86
7b22b4409a3e021f3b2c2be4099a99a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlImageNtHeader
strcmp
RtlImageDirectoryEntryToData
_chkstk
memset
kernel32
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
LoadLibraryA
MoveFileExA
Sections
.text Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE