Static task
static1
Behavioral task
behavioral1
Sample
42e17c8a943a982ca456bcdd451ab6098dee4a0231f4aa2bd871868bcf1208f0.exe
Resource
win7-20240221-en
General
-
Target
42e17c8a943a982ca456bcdd451ab6098dee4a0231f4aa2bd871868bcf1208f0
-
Size
65KB
-
MD5
d41eecf2ac023d8eb42f2fc9011e3e12
-
SHA1
c4d9a9012f436c5bc9a5a95a74111d3c67ec3156
-
SHA256
42e17c8a943a982ca456bcdd451ab6098dee4a0231f4aa2bd871868bcf1208f0
-
SHA512
1882cc0036f835dbfe300312eea336d1c1e638eeac6fcdb3f02bf88a931768225871c9b27c9dee157f1dbf3e187b624c28ea49ce96ccf7004ce91a23bd471172
-
SSDEEP
1536:ta+EprvZocS75XxXz+lm2gN/rSTJMAbtRkkw7k:tNUjGceXVzMmjNTAJF0k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 42e17c8a943a982ca456bcdd451ab6098dee4a0231f4aa2bd871868bcf1208f0
Files
-
42e17c8a943a982ca456bcdd451ab6098dee4a0231f4aa2bd871868bcf1208f0.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE