Static task
static1
Behavioral task
behavioral1
Sample
c450d79e041472e179eba3d0e4e4bf2c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c450d79e041472e179eba3d0e4e4bf2c.exe
Resource
win10v2004-20240226-en
General
-
Target
c450d79e041472e179eba3d0e4e4bf2c
-
Size
17KB
-
MD5
c450d79e041472e179eba3d0e4e4bf2c
-
SHA1
1aafc0407a78255fd074b9c8f1fa878dd612971d
-
SHA256
96e3ee96bc9951890acc5ca41de8cea3450ded13ddd5abe362cddb24689ae7df
-
SHA512
a91243e466c7528e95c628bee12bf6b43304c022b13eab71411a08ffbef2d17a91e5a4fe2194a8bf0daa99261c2e50c46a6a7aa8b3a39cab58f58a7bb5676960
-
SSDEEP
192:3hxHZ4NNtucYzuAgMmdU+UU0vr1xWZSDR0TluZdKiU001CGKqw5N0/00:3hxGNNg1gMmVkWYPKi01L65Os0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c450d79e041472e179eba3d0e4e4bf2c
Files
-
c450d79e041472e179eba3d0e4e4bf2c.exe windows:5 windows x86 arch:x86
b650d69ba2eb49af97c57821cf08461b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
user32
LoadIconA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DITAA Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ