Static task
static1
Behavioral task
behavioral1
Sample
a624f8ed2156c456f876ad2a26b18bb2f80b97ee55a9317244de6239cd591450.exe
Resource
win7-20240221-en
General
-
Target
a624f8ed2156c456f876ad2a26b18bb2f80b97ee55a9317244de6239cd591450
-
Size
65KB
-
MD5
b4df081f6da01cc2ca38d0730a5e1bb6
-
SHA1
3c8138766190d7a3132ea97b10b02d4525673108
-
SHA256
a624f8ed2156c456f876ad2a26b18bb2f80b97ee55a9317244de6239cd591450
-
SHA512
4c1e5d38ce50f42c402b5571c2e7fefdfb2ec0e65f9b97d8cf392a1f3ef06085f7443b45115149a1205e87d96b46f86841201cec76af551e4005cb0956a59168
-
SSDEEP
1536:7ugB5Ui6NHzb/yu3qzywXf05oK/wCA96RLaPwd6WwdePAoR8:7/Ui8Hzj3eywXInk6RLnyev8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource a624f8ed2156c456f876ad2a26b18bb2f80b97ee55a9317244de6239cd591450
Files
-
a624f8ed2156c456f876ad2a26b18bb2f80b97ee55a9317244de6239cd591450.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE