Static task
static1
Behavioral task
behavioral1
Sample
c062f9260ff993ba2b8da1567a911109.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c062f9260ff993ba2b8da1567a911109.exe
Resource
win10v2004-20240226-en
General
-
Target
c062f9260ff993ba2b8da1567a911109
-
Size
11KB
-
MD5
c062f9260ff993ba2b8da1567a911109
-
SHA1
7ebac633f1a8e60842c1700ccb39a3a06b3c78db
-
SHA256
746901eb791642075b7c9c773080e122df048e9fd856a891ce35cf80c19adf16
-
SHA512
e5fdf34b07f8e868afe3f2494519d96e23452e9daf9ac518a7e74c1febecbe98220fd3cc5c552a37aa6ca530ff40c85bc2a7ad656a5c3d407ad16be9a75645d5
-
SSDEEP
192:YrF7/0aSGgrqx1D74uYA3t5lvvOAu9PSHRig1j:YB7zgrqxd7443DROAu9PSxZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c062f9260ff993ba2b8da1567a911109
Files
-
c062f9260ff993ba2b8da1567a911109.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.naked1 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.naked2 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE