Static task
static1
Behavioral task
behavioral1
Sample
741789196e64ab8c682dfb7ebc6888e6.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
741789196e64ab8c682dfb7ebc6888e6.exe
Resource
win10v2004-20231222-en
General
-
Target
741789196e64ab8c682dfb7ebc6888e6
-
Size
33KB
-
MD5
741789196e64ab8c682dfb7ebc6888e6
-
SHA1
1de534aa4365d0a0ddc83c8451032263884b45f5
-
SHA256
5b6d9717e28c5b00f152df482d5b567dd8046926f2421443901a97e047d76328
-
SHA512
d888e15b5985f7e67e8f42be9fd6620818dab5b1cf9286a917f0058c8d495aee95b9e8f1cf6aaf4b873d96c6f9e6cc5f606a7d182104866647146f5f32c8f6f7
-
SSDEEP
384:J5QgDTrltaKbaOrl7ErAJxLK+ukCmF7yFfb2QHsHQsXGE3Ek:J5QgDTrqBOrlEry5F7O2QMHp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 741789196e64ab8c682dfb7ebc6888e6
Files
-
741789196e64ab8c682dfb7ebc6888e6.exe windows:4 windows x86 arch:x86
5cbd32510ca70f6ffda2f841dcdf88cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
Size: 14KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
XxxxXxxx Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 273B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE