Static task
static1
Behavioral task
behavioral1
Sample
c773482c59ad960a5e8366bb2146ddcf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c773482c59ad960a5e8366bb2146ddcf.exe
Resource
win10v2004-20240226-en
General
-
Target
c773482c59ad960a5e8366bb2146ddcf
-
Size
5KB
-
MD5
c773482c59ad960a5e8366bb2146ddcf
-
SHA1
8bb7dd1af9f624de28eb7908f706e1b8b1347e6b
-
SHA256
384ce8f43ca5691185d6906b29d12f276f55a0f5c08ffb45b5245d9ed4c3d816
-
SHA512
6805d48709407db0aa27e8270e03750bf6d08e2eb9369d9c8eb91a5e533f276080fdad0b274dc8391d5917b2d969dab7df165c1dc48afe7d2c0d45db6517948b
-
SSDEEP
48:ZvtS0AU7TAGIY3/Aj1kxfNWmKqlctod+Vj+nFAD5E8s8g+qxO43tC/Bu6Y:Z1YU7tx4ZsNF7e+gq8Pqx/d6u3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c773482c59ad960a5e8366bb2146ddcf
Files
-
c773482c59ad960a5e8366bb2146ddcf.exe windows:1 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE