Static task
static1
Behavioral task
behavioral1
Sample
c7ba4a288ad8adb10cddd1d6e900c565.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c7ba4a288ad8adb10cddd1d6e900c565.exe
Resource
win10v2004-20231215-en
General
-
Target
c7ba4a288ad8adb10cddd1d6e900c565
-
Size
14KB
-
MD5
c7ba4a288ad8adb10cddd1d6e900c565
-
SHA1
a7b4806a580e0f36e2187b5208a0ff8ce80b3774
-
SHA256
96a59194c7def583bfa6a9f3b7b92210a4b9f5db146b33ea8de07bc983d02e0e
-
SHA512
9e69a76531cb901a1ff53ddb22c5e467b8bc457f1e3e1f6ee1aca9bac3bd187ac210d2e3719f9c41bbe07fb940f205f3d2d5be574090e77304695e034f705ffd
-
SSDEEP
192:a3nWJ3F1eYGOzCewh+anPCX0BpRNw95T295ijXHOk8tM5Nc4ZLv9T5FNXQdJobqj:am31vXDXoyE5ijXHEM5Nck5FN0Cu6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7ba4a288ad8adb10cddd1d6e900c565
Files
-
c7ba4a288ad8adb10cddd1d6e900c565.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 7KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE