Static task
static1
Behavioral task
behavioral1
Sample
a0453ee779be188ed1f32f8908dc8132da57537bdf0b7b10c9ac8e4965186ec0.exe
Resource
win7-20240221-en
General
-
Target
a0453ee779be188ed1f32f8908dc8132da57537bdf0b7b10c9ac8e4965186ec0
-
Size
100KB
-
MD5
b60c9ec68b82a43ae3625a42deb32245
-
SHA1
000b4ac976195b8533b1f5eb01e9d580771642a2
-
SHA256
a0453ee779be188ed1f32f8908dc8132da57537bdf0b7b10c9ac8e4965186ec0
-
SHA512
ea4d4247c2175c41bbd7dd8376b718c4193ca20006dffc18c7f0a0782ea1d46a975fcfd228cb79064c197722fb100c7ac413f09f2624db4cc3607185c89028ab
-
SSDEEP
1536:3tJ81x0RSKcCs1ZUu+SnYRkK4yePZtCfVCMfmomFTqPS3T:9JzRSKFs1auNneJAZO4rqPm
Malware Config
Signatures
-
Detects executables packed with Sality Polymorphic Code Generator or Simple Poly Engine or Sality 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_SimplePolyEngine -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0453ee779be188ed1f32f8908dc8132da57537bdf0b7b10c9ac8e4965186ec0
Files
-
a0453ee779be188ed1f32f8908dc8132da57537bdf0b7b10c9ac8e4965186ec0.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE