Static task
static1
Behavioral task
behavioral1
Sample
30fcdb570c47ff6fb9a4d441192c4947a4f3467e27fb36df19d76d11f7f0bfc2.exe
Resource
win7-20240221-en
General
-
Target
30fcdb570c47ff6fb9a4d441192c4947a4f3467e27fb36df19d76d11f7f0bfc2
-
Size
213KB
-
MD5
1a1a62a6fdead7346f8b9fe5cf7adad4
-
SHA1
233962ca518249153650dbbee2720ce6d53dc674
-
SHA256
30fcdb570c47ff6fb9a4d441192c4947a4f3467e27fb36df19d76d11f7f0bfc2
-
SHA512
b61b077f946fa06502634bf7132cf97cd44102300c9946095449ce3c3dc58592be7f46e14a4a85c003b735e447b099b9a564e1c86233c256621b6b62f122eb96
-
SSDEEP
3072:mwZFBG7Gt5LQpL17tCAZbpQvKgMYbKXonUmeWxgFCg/0aDaBRght:msFY7c5LuBUKbGw/SxhScUDaG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30fcdb570c47ff6fb9a4d441192c4947a4f3467e27fb36df19d76d11f7f0bfc2
Files
-
30fcdb570c47ff6fb9a4d441192c4947a4f3467e27fb36df19d76d11f7f0bfc2.exe windows:4 windows x86 arch:x86
a7ca36aefde49259784672acc7d27a4d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Sections
.rsrc Size: 3KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lol 0 Size: - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lol 1 Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE