Static task
static1
Behavioral task
behavioral1
Sample
760e002d0bc71e6b15c317dcb0ccf6a3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
760e002d0bc71e6b15c317dcb0ccf6a3.exe
Resource
win10v2004-20231215-en
General
-
Target
760e002d0bc71e6b15c317dcb0ccf6a3
-
Size
7KB
-
MD5
760e002d0bc71e6b15c317dcb0ccf6a3
-
SHA1
f4b2bf499c713825a1b8a3250652c42460041fdb
-
SHA256
90ebe4454f491952184a37aa842e1dc49cadba064b2f4b186d1d3a68b0ba7a83
-
SHA512
a9d458850c086d2b9c2140ad911d2abb5cb1f88adb635644327460b0c8587824f5b62411f29b0e195b4d7cf02382d7e561a5cda77cfcd1e18c4182e1abf5937f
-
SSDEEP
192:q7QCo4QiM0evjkTGI0IMdmhEzTyhtsB6:q7QCpQr0erkKJIMdmewtsB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 760e002d0bc71e6b15c317dcb0ccf6a3
Files
-
760e002d0bc71e6b15c317dcb0ccf6a3.exe windows:4 windows x86 arch:x86
f11f9d43992b002b8d32d99190434e0a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
Sections
.packed Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 7KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE