Static task
static1
Behavioral task
behavioral1
Sample
01a1fb3cd76494e52584fb72561b7b57.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
01a1fb3cd76494e52584fb72561b7b57.exe
Resource
win10v2004-20240508-en
General
-
Target
01a1fb3cd76494e52584fb72561b7b57.bin
-
Size
16KB
-
MD5
01a1fb3cd76494e52584fb72561b7b57
-
SHA1
941c41814bb517b19d7fe02726b976c06aac9b2d
-
SHA256
99073fded0fc1efa0b2a1a5a39c67063e903284f31be07829e8e1c5be51a415b
-
SHA512
33af432cf08558f247c3540390917b4a6dfd43927e39b58ad4606f6acabdd54e7640d792d28d1c9c4a794085427a08cc095ad27ff3ec93345f18610a12e97102
-
SSDEEP
384:PuYgM21O9NM2a7Vus9ffbZ5ClNH6tK0/Vs8J20U9gsZjJ:bmE4usZbZ5C/D0/Vs8sVJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 01a1fb3cd76494e52584fb72561b7b57.bin
Files
-
01a1fb3cd76494e52584fb72561b7b57.bin.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 12KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE