Static task
static1
Behavioral task
behavioral1
Sample
7630fb74e271faacd9d9f4ba0bd0c598.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7630fb74e271faacd9d9f4ba0bd0c598.exe
Resource
win10v2004-20231222-en
General
-
Target
7630fb74e271faacd9d9f4ba0bd0c598
-
Size
59KB
-
MD5
7630fb74e271faacd9d9f4ba0bd0c598
-
SHA1
921234fac1fff852b7d1dcfef9a2b6cd95990e59
-
SHA256
8409ed3c7c75cab4d91a498e32c2c36dbba7d0977210f0254ce387d9efc444ce
-
SHA512
c1a78fe31c7b2ef8ac59b0a69a892c5ab04d4caced62dc28370cf66a38a2620b2a64b7eaa76f26782c95d97fc5fdee2ef844817a2ff86e65ff4af30081795d64
-
SSDEEP
1536:zX4ZGgIVIp7HXGidlhN4sV9UCPIxMueFirv0TVhh4Plt:zX2cPiLwsv1Iymrv0Pylt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7630fb74e271faacd9d9f4ba0bd0c598
Files
-
7630fb74e271faacd9d9f4ba0bd0c598.exe windows:4 windows x86 arch:x86
1bd6a1cccc0acf0bc50f0359268b4fc1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
_CIcos
Sections
pec1 Size: 53KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE