Static task
static1
Behavioral task
behavioral1
Sample
71922396d31546603a2f5220ecb9250c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71922396d31546603a2f5220ecb9250c.exe
Resource
win10v2004-20231222-en
General
-
Target
71922396d31546603a2f5220ecb9250c
-
Size
46KB
-
MD5
71922396d31546603a2f5220ecb9250c
-
SHA1
6e467d3055c4d76bc6dba92dd36b59d47adfe795
-
SHA256
70e3d862540ce23d9c3218f2688680798b24ca2f57d253aa9a4474bb0131649c
-
SHA512
cb79b0b2e05bf2bbbb27443ad044a9f95b4738695c8e89e8f97a29e52e97a78cb50c2fc779a71e904e475b72cec2c87c0962a5286e0d2c97c06f6813e4ba60de
-
SSDEEP
768:M7d7gE41tbxGIKjv06vT5qUEeVDHXLpJVx/vubnXTbWgOfzJBhGFGoP5Sli2:M7d7vCbsbvkWTXLjVE7egEVGd5Sli
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71922396d31546603a2f5220ecb9250c
Files
-
71922396d31546603a2f5220ecb9250c.exe windows:4 windows x86 arch:x86
2a5a692e1036204a0f85b8844f0aa4fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForMultipleObjectsEx
SetHandleInformation
WriteFileEx
DeleteTimerQueueEx
GetDiskFreeSpaceExA
SearchPathA
ExitVDM
GetCommandLineA
ExitProcess
GetStartupInfoA
Sections
.rc3sec0 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rc3sec1 Size: - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec2 Size: 38KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 1KB - Virtual size: 316B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rc3sec3 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ