Static task
static1
Behavioral task
behavioral1
Sample
980c1a995495ae6882cc6c03a8f5072c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
980c1a995495ae6882cc6c03a8f5072c.exe
Resource
win10v2004-20231222-en
General
-
Target
980c1a995495ae6882cc6c03a8f5072c
-
Size
461KB
-
MD5
980c1a995495ae6882cc6c03a8f5072c
-
SHA1
3a89a804c7829544fac724ca511c52900d4b354b
-
SHA256
b25ecd175668ee4d692aec7b26ff26c352ff2b2a98da5c9d330ca55ab2dd89d6
-
SHA512
1332e4cfda412c975ce8082a919261d4bfb66db7ee5190c03f6425cce16c6176700709fd9e5805aa6e23d85daed5286ee461da4331d4536ff92909f2e6876edd
-
SSDEEP
12288:41neCBLpXCq+v+TfOmRO1bBEhEszbHpG9K7KJV+uBqw4kERC:41neuL4vIfOmRO1bBmEszbIkKV+ugRC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 980c1a995495ae6882cc6c03a8f5072c
Files
-
980c1a995495ae6882cc6c03a8f5072c.exe windows:1 windows x86 arch:x86
f81d43832b04fcd52bf053c9e75e5e61
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualAlloc
user32
MessageBoxA
Sections
.DATA Size: 1KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FORTH Size: 459KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE