Static task
static1
Behavioral task
behavioral1
Sample
14164ac20e797d67b3b229d9d7e4006a5a81be246836a4faf78f60738da65160.exe
Resource
win7-20240508-en
General
-
Target
14164ac20e797d67b3b229d9d7e4006a5a81be246836a4faf78f60738da65160
-
Size
65KB
-
MD5
3cbdcc809267a2c0f6ea5d4c87d652a2
-
SHA1
25fb306ca52937489372c8053edbc815e6ab6406
-
SHA256
14164ac20e797d67b3b229d9d7e4006a5a81be246836a4faf78f60738da65160
-
SHA512
41e3cfe2f3d28f098407d847470cef198c20fb0fcf7adf2facd4bb8a08d749ed7c96d718fa9627243daa852d1feea5038b880ad28cb568774aeabc354e73788f
-
SSDEEP
1536:yAwW1W8lSKG4vNPwEC/5GImkYM8Xf93ijRJhbdxy:yjWvljFVY/gDk38XlStJhbds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 14164ac20e797d67b3b229d9d7e4006a5a81be246836a4faf78f60738da65160
Files
-
14164ac20e797d67b3b229d9d7e4006a5a81be246836a4faf78f60738da65160.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE