Static task
static1
Behavioral task
behavioral1
Sample
c686a15bfafc3b40506232ad8629f056.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c686a15bfafc3b40506232ad8629f056.exe
Resource
win10v2004-20240226-en
General
-
Target
c686a15bfafc3b40506232ad8629f056
-
Size
103KB
-
MD5
c686a15bfafc3b40506232ad8629f056
-
SHA1
ca01e450ad16edfaf9f59bd8c42098c0d5ad5ca1
-
SHA256
1824745df326bf6d3f021414d7eb08bfb684f8eca79aa7683d49bf449618031b
-
SHA512
044cc23a71b42dadfd206b492b77b8289a9f0c904a6916afe54d0e73fa9036e456b283c499f24820d2ac7795134ccb6f7057a6b2d4afc03a09c49dd3625a0e65
-
SSDEEP
1536:+pLiEY8AgGLjHQTN6/VvD6PBO3t6xLUaEelnwCkX4RFHek1Nq+dAgkaT0fC:keNOGLs2Lo+X+jRdXLsgxQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c686a15bfafc3b40506232ad8629f056
Files
-
c686a15bfafc3b40506232ad8629f056.exe windows:4 windows x86 arch:x86
4d8e9e06f8e51550e3e5089179e9846d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE