Static task
static1
Behavioral task
behavioral1
Sample
77f1be5be6b3fa544d87e94153740a1f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
77f1be5be6b3fa544d87e94153740a1f.exe
Resource
win10v2004-20231222-en
General
-
Target
77f1be5be6b3fa544d87e94153740a1f
-
Size
873KB
-
MD5
77f1be5be6b3fa544d87e94153740a1f
-
SHA1
fcf40db57efccd3030c0fc05db2e34e9adc1bd6f
-
SHA256
7de59678338db5ed39ff629f575d47bacf08647f4c3a787dda4afbf64efff945
-
SHA512
5556a3238e3dcdda7807df33237768befa1e07a9b19e3714039009a24da5dca039fdc915e6d5d8b4254aa0aca4eeb7160abacc937be6a9854e602c03fd9a716a
-
SSDEEP
1536:sgyO00c+9DVp8P93wWSuXMRNHFggiajmyD+wpgJ/zxHv0EHuoeerK3K9e:sTt+493XM2giXgs9cE/K3o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77f1be5be6b3fa544d87e94153740a1f
Files
-
77f1be5be6b3fa544d87e94153740a1f.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 67KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 800KB - Virtual size: 872KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE