Static task
static1
Behavioral task
behavioral1
Sample
c101d819081188d959788d1f32f65566.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c101d819081188d959788d1f32f65566.exe
Resource
win10v2004-20231215-en
General
-
Target
c101d819081188d959788d1f32f65566
-
Size
784B
-
MD5
c101d819081188d959788d1f32f65566
-
SHA1
c0530c9caeb6d70d84656383b25b149a9fac6c90
-
SHA256
e5fd4ddd7cd47caadc49fe1c0773808292af470f0334e94268ae00ad1ee43b27
-
SHA512
fb6deaca81469bec112a4d9eb99083dc498cc74b39be901017712c4acff7b1543771e83997384ba2f39662c9898712fc5823bdab07f528fff9a31bd473e4f087
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c101d819081188d959788d1f32f65566
Files
-
c101d819081188d959788d1f32f65566.exe windows:5 windows x86 arch:x86
23e3116edcde8f190769a3e5604a229e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
ZwTestAlert
ZwCreateFile
kernel32
ExitProcess
Sections
.text Size: 288B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ