Static task
static1
Behavioral task
behavioral1
Sample
7b1f493c70ca77068a8c534410a07adf.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7b1f493c70ca77068a8c534410a07adf.exe
Resource
win10v2004-20231222-en
General
-
Target
7b1f493c70ca77068a8c534410a07adf
-
Size
17KB
-
MD5
7b1f493c70ca77068a8c534410a07adf
-
SHA1
15e9a36f65f469201bfbe0256c7142d3b0baafc3
-
SHA256
421802daa5c42178a1ecbff3c6cacc46749c93a40d9ac1fcd69f0229c1d21595
-
SHA512
2f5ed8f152f6f541c4efa00911d6c022a56f97f80c9f40d1347fc638e6eb1eb1ca8e4d0ad6775cf89c04c28c821b7161866ea8549fa8a259b3ff9aa2f1323dae
-
SSDEEP
384:qsUWpujRTQYZOxHcc5aMkX0vAV/15BpU6tsAXOsSNE:q5HRTvAlp6DBiEsA+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7b1f493c70ca77068a8c534410a07adf
Files
-
7b1f493c70ca77068a8c534410a07adf.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE