Static task
static1
Behavioral task
behavioral1
Sample
51a1bce63460bfd0d4ad4712f54faeb41b9250c4c7d0b9fd107188986824b226.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
51a1bce63460bfd0d4ad4712f54faeb41b9250c4c7d0b9fd107188986824b226.exe
Resource
win10v2004-20240226-en
General
-
Target
51a1bce63460bfd0d4ad4712f54faeb41b9250c4c7d0b9fd107188986824b226
-
Size
1.3MB
-
MD5
b9b79b0b1fb19ff21efc36d2851c7804
-
SHA1
9e9d0abfb2cc4078864ef18d22824a75fe08d8b8
-
SHA256
51a1bce63460bfd0d4ad4712f54faeb41b9250c4c7d0b9fd107188986824b226
-
SHA512
be019442700ebe383c8ccd0b96c06cefad41ec71213c4cbc21a3012395347071471d5ee08d4e7b187056c7d93daac787f1c8c4e1aeb33230ef512dbc857fbb39
-
SSDEEP
24576:AY0K81Fqjl2RAzr0gbqhX0I3rRxufML+o+mdWS8J:j0NF0lUir0wqhXtrRYjbmwS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 51a1bce63460bfd0d4ad4712f54faeb41b9250c4c7d0b9fd107188986824b226
Files
-
51a1bce63460bfd0d4ad4712f54faeb41b9250c4c7d0b9fd107188986824b226.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 1.3MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE