Static task
static1
Behavioral task
behavioral1
Sample
d4d319f3348633269c8623b31ed9cf80.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4d319f3348633269c8623b31ed9cf80.exe
Resource
win10v2004-20240226-en
General
-
Target
d4d319f3348633269c8623b31ed9cf80
-
Size
4KB
-
MD5
d4d319f3348633269c8623b31ed9cf80
-
SHA1
dccc684a0cc4084b27795e32ed1e6d216a532c92
-
SHA256
0ee8228f88ace32739600c8cf83632724cdd4d78415bf9292caf75a75d313a95
-
SHA512
b9ba9d19ed2824699b88f393aedf2fd858f54bcf91b702553943653416801f65d365427407900cc464f6911286db348fd4d826a551708ebba36a457420529deb
-
SSDEEP
96:mCsNEyCWWYyvM3oCfInobU9iKV3ZPSQOY3HVywn:mYYywoRnobQZZqQOYXVP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4d319f3348633269c8623b31ed9cf80
Files
-
d4d319f3348633269c8623b31ed9cf80.exe windows:4 windows x86 arch:x86
bd51a645a9c68bd03b2e51586e5cbdcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
Sections
.text Size: - Virtual size: 12KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 984B - Virtual size: 984B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE