Static task
static1
Behavioral task
behavioral1
Sample
d6272bf8a345305b1fa1b94db538250c.exe
Resource
win7-20240221-en
General
-
Target
d6272bf8a345305b1fa1b94db538250c
-
Size
488KB
-
MD5
d6272bf8a345305b1fa1b94db538250c
-
SHA1
a636ba5efd39ddace7dd9fdda0b9dc876e3ee4e4
-
SHA256
1af0c14f23dfd5d26a83aeb6a4a28a5888a95e9aaa869d7a3187654fec984f37
-
SHA512
a11d410f090f03b141c7f32c3e7d69088a8f50260df1a1ab15235677a590cbe8741952a04d33e70e2f698585e17833f1f1476c4a9da70094c5c875550472a53a
-
SSDEEP
12288:J2pLIqNqUCPIGHuGOOTplTrCgjhLHwkpiM/eP6z:JlU00GvplTrCkH3P/W6z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6272bf8a345305b1fa1b94db538250c
Files
-
d6272bf8a345305b1fa1b94db538250c.exe windows:4 windows x86 arch:x86
9c8decf3582072f6edfc385a689f44f4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile
Sections
.E64E Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0AuA Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Fd9f Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE