Static task
static1
Behavioral task
behavioral1
Sample
c218587817fbe24a7347019a909bcc59.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c218587817fbe24a7347019a909bcc59.exe
Resource
win10v2004-20240226-en
General
-
Target
c218587817fbe24a7347019a909bcc59
-
Size
1.2MB
-
MD5
c218587817fbe24a7347019a909bcc59
-
SHA1
bfdd32a88ef2f36d7c8424e213f010eac77a1531
-
SHA256
71f74c28fd80e93e7d7d107273b223ef696e65cfc380733e84ca72362ccb51b7
-
SHA512
c55a2eed8a5f4b8a1f12af9340c0947e5e595457ba59834a6f5b810e08b71d70c385e640faf0831497596183ab5177c86f2216cc29cfca95b950b76c9a9a8cb9
-
SSDEEP
24576:XRJjEyD+Eh6S+dpV5X7sCwuiqkOup7dVV3gSab/uoHS30VBh:XXjEyx6DLr72i25vXab/pSEVB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c218587817fbe24a7347019a909bcc59
Files
-
c218587817fbe24a7347019a909bcc59.exe windows:4 windows x86 arch:x86
3c0e70bfa5f73f1f1cef484e2bcb5bf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
user32
MessageBoxA
Sections
CODE Size: 332KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 853KB - Virtual size: 7.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE