Static task
static1
Behavioral task
behavioral1
Sample
Virus.Win32.Sality.exe
Resource
win7-20240903-en
General
-
Target
Virus.Win32.Sality.AT-c8facd3aeb6155164c08c0fdfdd4dc878712abed0172cee59ecb5bb60a1acd43N
-
Size
97KB
-
MD5
34a0a68a355262d267f2edfa394fc6d0
-
SHA1
54e8f1a0c2b327c468253a6a6f7e46a5e82dbb0f
-
SHA256
c8facd3aeb6155164c08c0fdfdd4dc878712abed0172cee59ecb5bb60a1acd43
-
SHA512
eb64d8d5f5a4da033152995bdfa9724e9b21bfd84eb166dd7b6f11f7b93380b3b852f238fdd4be356437a0bdd599e3d16e8464e68f7e417e7736722ce8d1c2f2
-
SSDEEP
1536:/XZkR48elq8B5NYbz6dX0hyObk7S93IKx4sNJFIJIbmml60:/Jb7lq8XN3uHIKxfFIIyml6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Virus.Win32.Sality.AT-c8facd3aeb6155164c08c0fdfdd4dc878712abed0172cee59ecb5bb60a1acd43N
Files
-
Virus.Win32.Sality.AT-c8facd3aeb6155164c08c0fdfdd4dc878712abed0172cee59ecb5bb60a1acd43N.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE