Static task
static1
Behavioral task
behavioral1
Sample
7ac02e2078700bf7b74c837dd7ebc2f9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7ac02e2078700bf7b74c837dd7ebc2f9.exe
Resource
win10v2004-20231222-en
General
-
Target
7ac02e2078700bf7b74c837dd7ebc2f9
-
Size
12KB
-
MD5
7ac02e2078700bf7b74c837dd7ebc2f9
-
SHA1
4dc7e57cf18a2ba0a2be1a171f760798b0f2f799
-
SHA256
aa3b6328f8d36283fe0ded923b2a5e412245c22a364eff8706cf8c9b7923f33d
-
SHA512
25b575bc84e1d00ec34049684e6d1c13a37a12ca045af83ad6b9198c5df71619227464ab0e842b49ced968a7dc54a179545440be0c39ca1a830cc807c78e363c
-
SSDEEP
192:tiSqM+tWqoe4DU73TGyVl428zwSQ1CN42d3WLva7P9tbAIcK:trn+tWS4DU73TGCf8zwy62dGr4Dj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ac02e2078700bf7b74c837dd7ebc2f9
Files
-
7ac02e2078700bf7b74c837dd7ebc2f9.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE