Static task
static1
Behavioral task
behavioral1
Sample
800aef7782af49d41b6dea71eecc5741.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
800aef7782af49d41b6dea71eecc5741.exe
Resource
win10v2004-20231215-en
General
-
Target
800aef7782af49d41b6dea71eecc5741
-
Size
260KB
-
MD5
800aef7782af49d41b6dea71eecc5741
-
SHA1
8bcdab7d7e7b4b0f324e03343e2f0eea282661a4
-
SHA256
79ef9afe826a8361e6fe1dc02fa7f4b29b306fc4e43f134cc312d17fe92652d6
-
SHA512
b7afd8be146c22cdcb91733eaa91adfc696380734b0b07716d871e2aabd83658d8ab2bd17e886ff36fed28097ad04d7ccfc618e31238fcb5561e8b38c39d23f9
-
SSDEEP
6144:Zuv8QGkH3hrux9bJFVnJq8SWbuK5Mv4XwFpK8NCsV+ZKIEcf:U7A7JnnN1b7tuE8NCPZKIl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 800aef7782af49d41b6dea71eecc5741
Files
-
800aef7782af49d41b6dea71eecc5741.exe windows:5 windows x86 arch:x86
838812d1257040df5493272779a7ad5f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrFromTimeIntervalA
StrCSpnW
StrToIntExW
StrToIntW
kernel32
VirtualAlloc
LoadLibraryA
GetProcAddress
Sections
Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 253KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ