Static task
static1
Behavioral task
behavioral1
Sample
c638b5ea6d58067f4a2f4c7b0ce28bf7.exe
Resource
win7-20240221-en
General
-
Target
c638b5ea6d58067f4a2f4c7b0ce28bf7.exe
-
Size
65KB
-
MD5
c638b5ea6d58067f4a2f4c7b0ce28bf7
-
SHA1
90eea116cb19b3e40c846a8d56a1bf87f5c51407
-
SHA256
1ee12786b1d4e6f3f0aba53160301fa2c0829108f1dfd15fc2683219d2f26a89
-
SHA512
3fbb9fcd8769f82739fda971eb59e9710db2cb1bac15641b13cce4a63ae5bc39bd1d63f72698396494c49c0507353f192506bdd61ebdfef002caf39be214da93
-
SSDEEP
1536:vIDwlCSNXbZ9z0IZ5ML2r5COXaZv7Sj8sRxKn+rLua0wr8:vdtld9zfZ5ML20OXWv7BsRlrT0wQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c638b5ea6d58067f4a2f4c7b0ce28bf7.exe
Files
-
c638b5ea6d58067f4a2f4c7b0ce28bf7.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE