Static task
static1
Behavioral task
behavioral1
Sample
79931deefb8145abbec53ab24f1e5ad2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79931deefb8145abbec53ab24f1e5ad2.exe
Resource
win10v2004-20231215-en
General
-
Target
79931deefb8145abbec53ab24f1e5ad2
-
Size
5KB
-
MD5
79931deefb8145abbec53ab24f1e5ad2
-
SHA1
0765b4c4f031ebafe034930d2fbcc559dc6616d4
-
SHA256
197f1b323614495e1754b529fde74d79125ae1afadba1c2ef6df0df187ff8a8e
-
SHA512
2a15e09cc6b07ac394f4961c69f06607b7d50aa42fdb237df7fcf5e3027b88bd43168118c78478154f8bda5bdae37399548456f30b489b6b27166da282be1897
-
SSDEEP
96:QVL8UqRvQvG86UIYf00HUm2AsA7Uc+WGU87qmltiDK1aL4u1JeH3sRLbVN38SN:eL8UxMcf05gALWm7lbi2Ju1JeH3sRnVT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79931deefb8145abbec53ab24f1e5ad2
Files
-
79931deefb8145abbec53ab24f1e5ad2.exe windows:4 windows x86 arch:x86
a096f4c4637e2e3bd10d09e245b6836a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
msvbvm60
ord516
Sections
.PACKMAN Size: - Virtual size: 308KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PACKMAN Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE