Static task
static1
Behavioral task
behavioral1
Sample
7b8c82d95e2242f3997ca15407e19923.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b8c82d95e2242f3997ca15407e19923.exe
Resource
win10v2004-20231215-en
General
-
Target
7b8c82d95e2242f3997ca15407e19923
-
Size
3KB
-
MD5
7b8c82d95e2242f3997ca15407e19923
-
SHA1
69dac472d6ef9e4340b8df313e9442108dbc72ed
-
SHA256
2a061b4195618ecf3ad9b2d834972e788c01d95d34066dcf29ab1ba828134b91
-
SHA512
8dd64097e741c424ab2327b2d1dbcd2cb3e0d83b96b68d5263f2f37180d5860732a1e253bde8723600aabf7540b87a99a49e3613c7479ec12f0c330fa231b910
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b8c82d95e2242f3997ca15407e19923
Files
-
7b8c82d95e2242f3997ca15407e19923.exe windows:4 windows x86 arch:x86
0755f93914a7948c48a12a20b64f29e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ReadFile
CloseHandle
WriteFile
CreateFileA
WinExec
GetModuleFileNameA
user32
wsprintfA
ws2_32
WSACleanup
closesocket
recv
send
connect
htons
gethostbyname
socket
WSAStartup
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 170B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE