Static task
static1
Behavioral task
behavioral1
Sample
7f06fa59e3c42935c0f878cb8e293b4c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7f06fa59e3c42935c0f878cb8e293b4c.exe
Resource
win10v2004-20231215-en
General
-
Target
7f06fa59e3c42935c0f878cb8e293b4c
-
Size
76KB
-
MD5
7f06fa59e3c42935c0f878cb8e293b4c
-
SHA1
9d8d2f688e8204a455ec96d3f43fb9daff75ba3f
-
SHA256
8184f28ee2097f7110d5452e380c95c37ef1ad9d89628c96b1ce515a2f46c19e
-
SHA512
1f25235405d0155143917aa893f1c3c5e4665924c06cff70ac25adc4d4e81d23bb8b626c94c0e6184d323ca3916fd3dc825ae4348f9c3eba92046ddaf35d6bdb
-
SSDEEP
1536:vLLsklpuybOD6KC6PYybMFWpJJ2Zy7L7relgOjNYXHHP6paUlXUHhaYe8jd:vLLsEIF/DMUDcZsL7relgOjNESrlXUAg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7f06fa59e3c42935c0f878cb8e293b4c
Files
-
7f06fa59e3c42935c0f878cb8e293b4c.exe windows:4 windows x86 arch:x86
827ae9e92f0226e668e5b65613328163
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
ws2_32
inet_addr
Sections
.ndjc Size: - Virtual size: 428KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndjc Size: 75KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE