Static task
static1
Behavioral task
behavioral1
Sample
c24e0ba3bf6cdb367d6236531b3c0f4b.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c24e0ba3bf6cdb367d6236531b3c0f4b.exe
Resource
win10v2004-20240226-en
General
-
Target
c24e0ba3bf6cdb367d6236531b3c0f4b
-
Size
8KB
-
MD5
c24e0ba3bf6cdb367d6236531b3c0f4b
-
SHA1
a46bd6ef3c3e37f524eff5c920e3968d9c0e879a
-
SHA256
41cc7c07fe911238b2890a0b90d95d5928bc1858c2573d83b9798f77823c4c6a
-
SHA512
7cb4a131bb3767699fbf8091ccc16892a440c82d9ec097b78ff0edd2d2c97fb60b3010fbd76b369ed7af68dd95151fc0becb25ca01c3a1395ffa85a55b431b06
-
SSDEEP
96:nPuWFhLdw/gRwrQ12bRbYsXMLReVuntZgsxTV2lPMUsRUsfUD6EhmG/0oXOFBgC:np4Q8bp18touFx2RM5R5fTTH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c24e0ba3bf6cdb367d6236531b3c0f4b
Files
-
c24e0ba3bf6cdb367d6236531b3c0f4b.exe windows:1 windows x86 arch:x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE