Static task
static1
Behavioral task
behavioral1
Sample
7de6fbf2257b08e0485bff6a473e51df.exe
Resource
win7-20231215-en
General
-
Target
7de6fbf2257b08e0485bff6a473e51df
-
Size
205KB
-
MD5
7de6fbf2257b08e0485bff6a473e51df
-
SHA1
78a2df2f97a4298d1b07647c5f6d9a202e2c528a
-
SHA256
688ae698012c80ece1d0de45c2da25b535167f7af448c4e6d423be053c268711
-
SHA512
e0f2d98f809d0b8d27611cb5d9782f05a0a9d8f7d4398ce29d521d8d9afddc06c64c2a064bd4a408cfb71423f49d125e38db24c9fe5f0c7e9414001fc29e71aa
-
SSDEEP
6144:OlKO/DsohtTxBLrHcPjQJhQWprokJkNrY6:OlKGYohtTjLwPtWrofNv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7de6fbf2257b08e0485bff6a473e51df
Files
-
7de6fbf2257b08e0485bff6a473e51df.exe windows:4 windows x86 arch:x86
fdbfec85672f73d2a4d49635454936d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE