Static task
static1
Behavioral task
behavioral1
Sample
bd14b26940d1f05233b1d0294e454630N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd14b26940d1f05233b1d0294e454630N.exe
Resource
win10v2004-20240709-en
General
-
Target
bd14b26940d1f05233b1d0294e454630N.exe
-
Size
42KB
-
MD5
bd14b26940d1f05233b1d0294e454630
-
SHA1
e4685e34e69e58607cdc95ed1a493a80233d10e8
-
SHA256
b51e18efd1b80aafe04929857259a2c2519c1f043bebb4ed58b6eb4b095f8eb6
-
SHA512
4e788cc0d273f22cc18519112e0ef36b887089d2dfd89fb706c11b43064675b9821291acb87b48fa8e1ae9c327cf45f2adc2bdb1f7dfd37f29ae5563e738723a
-
SSDEEP
768:Az5mImhdEWwaFXDxB1QuwsVkOtVeFhO5kw4/Q6EnqeHdnq:6mImEaFXDxB1TV1tsTO5uLkrtq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd14b26940d1f05233b1d0294e454630N.exe
Files
-
bd14b26940d1f05233b1d0294e454630N.exe.exe windows:1 windows x86 arch:x86
fb74e2a3a03e0d51e3ff32b08efca1b4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
FreeLibrary
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapCreate
HeapAlloc
winmm
mciSendStringA
msacm32
acmStreamOpen
user32
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
DefWindowProcA
PostQuitMessage
Sections
.data Size: 512B - Virtual size: 38B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 598B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ