?F342n@@YGXPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
b718133c12cc65a1d84a9a26b093cf84.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b718133c12cc65a1d84a9a26b093cf84.exe
Resource
win10v2004-20240226-en
General
-
Target
b718133c12cc65a1d84a9a26b093cf84
-
Size
54KB
-
MD5
b718133c12cc65a1d84a9a26b093cf84
-
SHA1
f7db96bca3c39170a0d855357c2c0ba673997acc
-
SHA256
5a60096f4711b8a4dc7fee13cc9efb9c6843a51f61ef203deb07041809a03f06
-
SHA512
8b1c107f57e5971e3e9db893e507df54fe831f5bb72cff70ce077b9743d4dfebb5e9b089420757d8a5f31c8c88c3b436345f123afdfb350c550a8f1640d1d3bc
-
SSDEEP
768:j/azKs4AukLQQUt9dYnZRL1L9U5We4d9vtnLO7kVsVtw1lpBtnGdW362RBxDLWq9:TaeaLQQUtrAD3hjVMSzDtGAKJO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b718133c12cc65a1d84a9a26b093cf84
Files
-
b718133c12cc65a1d84a9a26b093cf84.exe windows:5 windows x86 arch:x86
da62460fae9d3c6d4e94d3aa6e396a0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetFileInformationByHandle
AreFileApisANSI
OpenSemaphoreA
Exports
Exports
Sections
3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.23_0 Size: 512B - Virtual size: 446B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r123c Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ