Static task
static1
Behavioral task
behavioral1
Sample
d5664306e1dc01610aaa262e0c9c88d7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d5664306e1dc01610aaa262e0c9c88d7.exe
Resource
win10v2004-20240226-en
General
-
Target
d5664306e1dc01610aaa262e0c9c88d7
-
Size
3KB
-
MD5
d5664306e1dc01610aaa262e0c9c88d7
-
SHA1
0fed5087ccf2f0b4ec5cad6b27ca96058d07fa39
-
SHA256
e348073f38da05a905f8d3cce0fe5e0ec36f8ff3ec262555d579f77272566f50
-
SHA512
6d1b4366baa01e622bd0cecedabc50ef7f314a2b3f9631575e328447b85533845a7192740c9c0f287c34def90b2febf521dfea756026cacdfd6a387f5af80e8e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5664306e1dc01610aaa262e0c9c88d7
Files
-
d5664306e1dc01610aaa262e0c9c88d7.exe windows:4 windows x86 arch:x86
50212e44c6ad994554048e91441e42a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
CreateThread
user32
MessageBoxA
msvcr80
exit
Sections
.text Size: 512B - Virtual size: 101B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 602B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ