C:\Folder of Working Project\ProjectTest
Static task
static1
Behavioral task
behavioral1
Sample
7d42e4a493a335d8869f5b24eeba93b1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d42e4a493a335d8869f5b24eeba93b1.exe
Resource
win10v2004-20231215-en
General
-
Target
7d42e4a493a335d8869f5b24eeba93b1
-
Size
173KB
-
MD5
7d42e4a493a335d8869f5b24eeba93b1
-
SHA1
59b4549ee51c18e13c79eead583ca27f3946e10d
-
SHA256
37f9bb63c9ac4b200e77bc7e7ef171df41c16fb1bd13b0d282790a8b74506edd
-
SHA512
b8059a42901a1b0827c340da1843c15bf43581e554ee802d38ea5f467f4f2f3a1923b9c25abdfa13ed3ddda5a4ea667c1e127536d0d3d0dcd1ca01b620844150
-
SSDEEP
3072:XwASoSH5Oa6Jh+rXWad7WdraXC37HsufBm3d9aFYAvIafh9CnQMI/y:gASoxashGWK0ayHc3d6Z98QMr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d42e4a493a335d8869f5b24eeba93b1
Files
-
7d42e4a493a335d8869f5b24eeba93b1.exe windows:5 windows x86 arch:x86
a06acd8560019d0f2d0d96dcde270a7e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
user32
GetDC
kernel32
AddAtomW
GetFileAttributesW
GlobalFree
lstrcmpA
LoadLibraryW
GlobalFlags
DeleteFileW
GetFileType
IsDBCSLeadByte
GetCurrentDirectoryW
lstrcatW
GetLocalTime
LocalUnlock
GetAtomNameW
shlwapi
PathAddBackslashA
Exports
Exports
_ExitWindowsExExitWindowsEx@0
Sections
.text Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ