Static task
static1
Behavioral task
behavioral1
Sample
a1fd6605d824bc79e05113ffd61e0352.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a1fd6605d824bc79e05113ffd61e0352.exe
Resource
win10v2004-20240221-en
General
-
Target
a1fd6605d824bc79e05113ffd61e0352
-
Size
20KB
-
MD5
a1fd6605d824bc79e05113ffd61e0352
-
SHA1
19d4f8c5d07150337562ea89281c4c10ed3c214c
-
SHA256
1c6a4e523219c8d5ff626a32a1a7af01afe5b1d14954d969284597ede819b060
-
SHA512
23d61739bb294d50843c7c9bc31abd9e0ef710244a295fb39fdf2236c1bfa6547cf4fde4ce65549258f71bacc227d84aa780d474de9281d7e74ae832694b96f1
-
SSDEEP
384:exWbZoFJCscdBwFH2FUIIudipiVoimZR0NrI7uVDsc9ofz:+Wg81ayDVoiPNr5ZGz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a1fd6605d824bc79e05113ffd61e0352
Files
-
a1fd6605d824bc79e05113ffd61e0352.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 16KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE