Static task
static1
Behavioral task
behavioral1
Sample
693aab6650404fd6d84fba55e8c3173c1892dd2246c6b5414bb9d0df800602cf.exe
Resource
win7-20240221-en
General
-
Target
693aab6650404fd6d84fba55e8c3173c1892dd2246c6b5414bb9d0df800602cf
-
Size
4.2MB
-
MD5
ab21c314c7c88fb913457fa1ac716c40
-
SHA1
7d91b9c4b1b413757f2a3ebd0135e2a7a93e4957
-
SHA256
693aab6650404fd6d84fba55e8c3173c1892dd2246c6b5414bb9d0df800602cf
-
SHA512
f7870ccfbf719ad48b81ca8c09956aea4b4e1df02619fc12b2c47a9a1d3e4fef08a0a5c9782eb0f39dd77cb22b35c0a07ba549dcbcbff4f730c47b49aeeb9375
-
SSDEEP
98304:zaISQjwdR9s/oTRMyme5lxNqkjNm2EHOBi4+Yn:zaZQsRBmKqkJmuBX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 693aab6650404fd6d84fba55e8c3173c1892dd2246c6b5414bb9d0df800602cf
Files
-
693aab6650404fd6d84fba55e8c3173c1892dd2246c6b5414bb9d0df800602cf.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 4.1MB - Virtual size: 7.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 94KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE