Static task
static1
Behavioral task
behavioral1
Sample
7ddb0cf8f4be76539628149affdc0991.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ddb0cf8f4be76539628149affdc0991.exe
Resource
win10v2004-20231222-en
General
-
Target
7ddb0cf8f4be76539628149affdc0991
-
Size
59KB
-
MD5
7ddb0cf8f4be76539628149affdc0991
-
SHA1
bbceea31e220ca7de635a0148177c9a4f452a8a3
-
SHA256
088dde7a2702539307982d9542637b04bb82a90bcffe25588ebf3a9530136446
-
SHA512
087b9b4c5ffcdf7a3352bedf8d28a656026c63ed31e7f0159bd4988b599a697404ea1cf8046c4914eaccb51e0043f4ee5e33cd7f4659ec8ad82b5e03d43996c8
-
SSDEEP
768:DkP49Y1rFKWfFRGUMtQX2TCCE0Icbh/0u1zviWustLwvm+ABZB6f:DkP0YtFKoFRGlyGTCebh/d/tke9BPK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ddb0cf8f4be76539628149affdc0991
Files
-
7ddb0cf8f4be76539628149affdc0991.exe windows:4 windows x86 arch:x86
7e681fcd35bb9d68359ce611ad8a6f96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualProtect
Sleep
SleepEx
GetProcAddress
LoadLibraryA
GetTickCount
Sections
.text Size: 59KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE