Static task
static1
Behavioral task
behavioral1
Sample
77ee50384ee2e947fe4a9eb21baf097cb70c3d8763c08481794228fad6be01c8.exe
Resource
win7-20240221-en
General
-
Target
77ee50384ee2e947fe4a9eb21baf097cb70c3d8763c08481794228fad6be01c8
-
Size
287KB
-
MD5
cef78fc35af3674d2f58145f3f2a4525
-
SHA1
3ed979797255923d36d78600938e81ad36a14d5f
-
SHA256
77ee50384ee2e947fe4a9eb21baf097cb70c3d8763c08481794228fad6be01c8
-
SHA512
0a696744d64018e3cf876b57e956aa06f3dc1102aa40d6ca022f89190e209cf74006eb709d16176e64d30c0d3ca9f9411474aa6c40ffc8cec821e4ecf4879a02
-
SSDEEP
6144:96xwSR5NtUIJEWyXuew+q1l0d2Js6H5/TZkKw:9A3NtUISdPw+Elq2Jsm2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77ee50384ee2e947fe4a9eb21baf097cb70c3d8763c08481794228fad6be01c8
Files
-
77ee50384ee2e947fe4a9eb21baf097cb70c3d8763c08481794228fad6be01c8.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 244KB - Virtual size: 384KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE