Static task
static1
Behavioral task
behavioral1
Sample
c265062f9012942efb4cc71431c3252c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c265062f9012942efb4cc71431c3252c.exe
Resource
win10v2004-20240226-en
General
-
Target
c265062f9012942efb4cc71431c3252c
-
Size
54KB
-
MD5
c265062f9012942efb4cc71431c3252c
-
SHA1
63b73f6c6648fb5aa3b331580b9d7bd9bfadcda8
-
SHA256
425f5c826645a86557fabfebd932f9baf59f6bfcd65fed2110eb5311e6f9c7e7
-
SHA512
692d137740520d3354ddd81f3019b5716ba345d091f3be34464ebd1c9da458244a4ece326ca363823dcaa2a305ad10b1ccb8d0fb60e9858bda0fed88c855d742
-
SSDEEP
768:yeJV08uVsgHgUDpiCqFYVO+1WlC1uxEtYk9cPWfuQdiHIWrwnvXv0wWE:LaCQDDpiC4uO+1lcytyPWfutwnEwWE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c265062f9012942efb4cc71431c3252c
Files
-
c265062f9012942efb4cc71431c3252c.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 44KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE