Static task
static1
Behavioral task
behavioral1
Sample
7696b81904ee31f0d2eacb453c77faf8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7696b81904ee31f0d2eacb453c77faf8.exe
Resource
win10v2004-20231215-en
General
-
Target
7696b81904ee31f0d2eacb453c77faf8
-
Size
55KB
-
MD5
7696b81904ee31f0d2eacb453c77faf8
-
SHA1
65d7f122a673294be507c31424f5dfa3c9c2a3a5
-
SHA256
198f6abf46519f3beb71aaedd37b78c6778a18d550068ad22addefaf83b7d938
-
SHA512
4415b380af21efa807634550a60cdbf5a2d6100b8762be71e6de8370dbc530f871c5343732c29181dab24a352b208ba4037c9c0dda0fe46bb8301d8d440cf517
-
SSDEEP
1536:tCqqG9El0J6GBQWenmAqoC5ZJHUQL6FC:0VG9lJpBT7A9C5ZJtu8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7696b81904ee31f0d2eacb453c77faf8
Files
-
7696b81904ee31f0d2eacb453c77faf8.exe windows:4 windows x86 arch:x86
a7333743ef063a68d1d860bbdf1c328e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
VirtualAlloc
Sections
.pelock Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pelock Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE