Static task
static1
Behavioral task
behavioral1
Sample
72255d2c1e50e0644ba1f186155b9686bc67dee9f0a0a42dd0991c7fa8143978.exe
Resource
win7-20240221-en
General
-
Target
72255d2c1e50e0644ba1f186155b9686bc67dee9f0a0a42dd0991c7fa8143978
-
Size
197KB
-
MD5
e042c5f73f050cb56bd9855e68414c1a
-
SHA1
fd36c021f58c47d8e39462bce4305be9c646a297
-
SHA256
72255d2c1e50e0644ba1f186155b9686bc67dee9f0a0a42dd0991c7fa8143978
-
SHA512
aeaa4a597e9ee7eacba1aa6dfcf29b59c842cfd0d9004e66f85e59df71e2f1d12e9e55f7e16b028734ed883cf1db4674f484fa72b447ae62352f2607b00bf7ca
-
SSDEEP
3072:DWTeUSUf5NgokdbfvrXzEFtD2rQogicqwmln8By8aQirYOFQrjY1NHPy2Kx:ymUzarrXEtDKQoBfl8srQiYaQry5FO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72255d2c1e50e0644ba1f186155b9686bc67dee9f0a0a42dd0991c7fa8143978
Files
-
72255d2c1e50e0644ba1f186155b9686bc67dee9f0a0a42dd0991c7fa8143978.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 161KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE