Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240802-en
General
-
Target
file.exe
-
Size
45KB
-
MD5
7b821fd108214b29fff46483a60c8658
-
SHA1
ecb5f0dd1410e5e7851813287be286915d00bdbd
-
SHA256
cdef916e83e2af8a4cf899526eb3032826feb8aad1824f8b9a1b7c52f3f84280
-
SHA512
5fa8585a7522caf612f9961d2f53d9a7876f73c85452f5b2adefb9da8d52278875fb04ac449ac5ae847e3d72d59cd62cf7a32eae85308a28293becb41f80a165
-
SSDEEP
768:sXIakqD3Vi2liJyyN31uoa9p4qiOZZCIU+6onQgwWIWuiYSMXf96gsE+pzVP07Da:sX5k+UMicU3HaMaZCIU+6oQLlfIg8pzV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource file.exe
Files
-
file.exe.exe windows:4 windows x86 arch:x86
fc2ca0dd2bd0f0a143659652556a192d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
_iob
advapi32
FreeSid
wsock32
getsockopt
ws2_32
WSARecv
Sections
.MPRESS1 Size: 39KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE