Static task
static1
Behavioral task
behavioral1
Sample
851b10e56dd47d4e1624913586c416d64699d30e232d8179b23f7ab369a64c5a.exe
Resource
win7-20240221-en
General
-
Target
851b10e56dd47d4e1624913586c416d64699d30e232d8179b23f7ab369a64c5a
-
Size
65KB
-
MD5
9ef232226174ad5e39bac59f3aa11b07
-
SHA1
8aa6cfbd732fd82d959dfd5ab11fe7f60907e436
-
SHA256
851b10e56dd47d4e1624913586c416d64699d30e232d8179b23f7ab369a64c5a
-
SHA512
d23e7b03c5e27358aa68e53b3bee089101565c4785a3320963352aee4eeb0fa6003bb9e3d0b85c38664124cf4b1761b6a9cb0c0a1c7bfd7ceca7951899a0a78c
-
SSDEEP
1536:7aM3jHVJrjxeZBJLoISoIx6IR0Nn0MM98Gk11D:OMTHzrUiIw0Nm98ZD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 851b10e56dd47d4e1624913586c416d64699d30e232d8179b23f7ab369a64c5a
Files
-
851b10e56dd47d4e1624913586c416d64699d30e232d8179b23f7ab369a64c5a.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE