Static task
static1
Behavioral task
behavioral1
Sample
7051ba662373e793b01e8c6fff94f40b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7051ba662373e793b01e8c6fff94f40b.exe
Resource
win10v2004-20231215-en
General
-
Target
7051ba662373e793b01e8c6fff94f40b
-
Size
54KB
-
MD5
7051ba662373e793b01e8c6fff94f40b
-
SHA1
6c54faf6b6d7904cc0e4e3a31b53d9846bfba313
-
SHA256
e4b2c310eef899e95f6b6ecc367d676968cd0d903d23bdf603ff412c3aaef975
-
SHA512
f68457cfe5b8ff3e0c1e4da8b77be6f4b59d4500c4a44b8dcb769e618917e69ce866f585700cf8e43c0d6dd3c86579143c9dc20535ebb37e457b46bdfc9532e4
-
SSDEEP
768:R2evFIYG0on6HGavZUdQffoaFNnioNQpMGG2q5bXS5/dtmC0n33gbzlIxuNewwTy:Rv8V6HGavhgaF2QsmC033gXlIAApTNwT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7051ba662373e793b01e8c6fff94f40b
Files
-
7051ba662373e793b01e8c6fff94f40b.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
. Size: 155KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ