Static task
static1
Behavioral task
behavioral1
Sample
a0664608ef03a6bbcadd75d8e8b0134f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0664608ef03a6bbcadd75d8e8b0134f.exe
Resource
win10v2004-20240221-en
General
-
Target
a0664608ef03a6bbcadd75d8e8b0134f
-
Size
25KB
-
MD5
a0664608ef03a6bbcadd75d8e8b0134f
-
SHA1
91e8f9efc6c0e2bfe78da664f823ecdf7c7ed8ea
-
SHA256
7ef5ca80bcf4f48956b632ed9a55d682592e0aa63a710c14eb2d5f70e4f7b912
-
SHA512
09c8f21d127c69442025daa3c4995720d058ba993931a79fde1a8f04c76704bf66e32d30ed1a13cf40411d758697378698a241171a2504adea6767a0e20668ff
-
SSDEEP
384:VzIUS4UpAmpo7aDfkTWWVZwl2kCaRWThyrgvMIDCrV4k+9Ym:9IpDqGDpWVZwMFa8dyMUtik+9Ym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0664608ef03a6bbcadd75d8e8b0134f
Files
-
a0664608ef03a6bbcadd75d8e8b0134f.exe windows:4 windows x86 arch:x86
8deb98a1041826edd52c6a363a7429a4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrlenA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
msvcrt
_strdup
strlen
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ