Static task
static1
Behavioral task
behavioral1
Sample
7e9fdb9d7de3365d9e28a828fc622e9a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e9fdb9d7de3365d9e28a828fc622e9a.exe
Resource
win10v2004-20231215-en
General
-
Target
7e9fdb9d7de3365d9e28a828fc622e9a
-
Size
422KB
-
MD5
7e9fdb9d7de3365d9e28a828fc622e9a
-
SHA1
af441f16287bce02ea91d6be781b8dac2d2bd2e6
-
SHA256
ad7722c2ddf457e30dac7dee8d20ba46fae94647d844f1ddb4c8f4b1e4025150
-
SHA512
479aadf9fd08ff42e026674493c9f29aba430e217e6af8d594b066ee7e92882a914a801484b692e0d6c269b61b30c9e1afb0343130657c957ed30d6aef059314
-
SSDEEP
12288:bTT1/HohmU8oJQBL4tIskD0hjO/hYZzOYi1UBwL:ByfQetIsmeO5uOX/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e9fdb9d7de3365d9e28a828fc622e9a
Files
-
7e9fdb9d7de3365d9e28a828fc622e9a.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 396KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE