Static task
static1
Behavioral task
behavioral1
Sample
835e4addfead98e700564b2e7674453d91d8c2e671605d95757ad4a5093a2f7a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
835e4addfead98e700564b2e7674453d91d8c2e671605d95757ad4a5093a2f7a.exe
Resource
win10v2004-20240508-en
General
-
Target
835e4addfead98e700564b2e7674453d91d8c2e671605d95757ad4a5093a2f7a
-
Size
10KB
-
MD5
7bf6e4f41651b27f79ccc81aedb55ce8
-
SHA1
9b454651f506e77f13fe5dc34396c8d05f8883ce
-
SHA256
835e4addfead98e700564b2e7674453d91d8c2e671605d95757ad4a5093a2f7a
-
SHA512
580db3dcf387e85c023bb7ebf3a22df3d0886b1448ba45a1c0788cd36906f59e42fec4c841a738a18d6b1f6510e6e689dacdb8759da90a6852e60f47fb1144b4
-
SSDEEP
192:nesgs9nP0PCuUqfUuYaCvS2ET2WukaYHRh7qNkyCMtgtb0YZiR4d:9gA0PCuriSb20aYHj7qthgfz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 835e4addfead98e700564b2e7674453d91d8c2e671605d95757ad4a5093a2f7a
Files
-
835e4addfead98e700564b2e7674453d91d8c2e671605d95757ad4a5093a2f7a.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
CODE Size: 6KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE