Static task
static1
Behavioral task
behavioral1
Sample
d54849177e8bf6a03528786fda43edb80e5419b7b93362f50a04c2a1b54b86ff.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
d54849177e8bf6a03528786fda43edb80e5419b7b93362f50a04c2a1b54b86ff.exe
Resource
win10v2004-20240226-en
General
-
Target
d54849177e8bf6a03528786fda43edb80e5419b7b93362f50a04c2a1b54b86ff
-
Size
71KB
-
MD5
20a1ffee91ee264067c9f33ce450fff8
-
SHA1
b5028154a186119c990235b33d486d5c002a9e68
-
SHA256
d54849177e8bf6a03528786fda43edb80e5419b7b93362f50a04c2a1b54b86ff
-
SHA512
7822ef175e8c640cf5d1b4800501363dccdc74a080a5fd8bdb0601552a4647cdb2bba1ac613ab83488a3e5a4e643bb511b795f199995f0e2743f33bab643a413
-
SSDEEP
1536:x05eSd2CGilFul/vKVjb/uNf5Nf8kuHPvIRgHHu:cDavcbUZ8trHu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d54849177e8bf6a03528786fda43edb80e5419b7b93362f50a04c2a1b54b86ff
Files
-
d54849177e8bf6a03528786fda43edb80e5419b7b93362f50a04c2a1b54b86ff.exe windows:4 windows x86 arch:x86
0c144496adf6d6951a8195019d714846
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile
Sections
.text Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE