Static task
static1
Behavioral task
behavioral1
Sample
c57037d1a0f2a70a6548d5b17e7e40ac.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c57037d1a0f2a70a6548d5b17e7e40ac.exe
Resource
win10v2004-20240226-en
General
-
Target
c57037d1a0f2a70a6548d5b17e7e40ac
-
Size
47KB
-
MD5
c57037d1a0f2a70a6548d5b17e7e40ac
-
SHA1
b433559b408ecc3e82d347654c0aed7a120b33d1
-
SHA256
505209b7db3cda4f66b06e99a8a72fc245d8039a9ffeda7d8dde59c12d218ff3
-
SHA512
eab42ab7d2148708427d55872fb5f0f823e8b56b8d601a3022bd9c58f56203064faf291c5a9f5ac90dcf33eca6ecfa853ef6ca0f36a5e81ef9522357a9d38340
-
SSDEEP
768:lDO4+dbNQtC7N8xuweB+HlPXtI+kIYQVmt2YXyVLaV0dBSaEh:Np+dbF7N8x/egHlPXt5YobYh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c57037d1a0f2a70a6548d5b17e7e40ac
Files
-
c57037d1a0f2a70a6548d5b17e7e40ac.exe windows:4 windows x86 arch:x86
820ab24e53af2dbafc74d24f87e40262
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
comctl32
InitCommonControls
kernel32
LoadLibraryA
GetProcAddress
Sections
Size: 18KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE