Static task
static1
Behavioral task
behavioral1
Sample
00e9c7aba40a3d19d9beea63e7d61ab0.exe
Resource
win7-20240221-en
General
-
Target
00e9c7aba40a3d19d9beea63e7d61ab0.bin
-
Size
65KB
-
MD5
00e9c7aba40a3d19d9beea63e7d61ab0
-
SHA1
900b85010cba871e38731390e49fcb1ca31d889f
-
SHA256
fa3dec9879ad3572a96e54f91156ce3700d9062e0980e764ddcb53301dc4c572
-
SHA512
b9879698b23edcd2173ae68f011ee9d8797db7ae652c9a45aa0906708f438db6a1a112310dde0c2f2920312a86bcaaa84032c4316ddafee1836c7164ef814e26
-
SSDEEP
1536:nermtiBuToiRPqlntyJjVqZCuI3pn6VkDYhljtS6/x/0LOZ+WrrJxyWD:EmMBuDRSlnEJ8fI96uDUl5ZCIf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00e9c7aba40a3d19d9beea63e7d61ab0.bin
Files
-
00e9c7aba40a3d19d9beea63e7d61ab0.bin.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE