Static task
static1
Behavioral task
behavioral1
Sample
4395f14d1af1ba317754bc2ee55fefdf60a44619704dcfc2fff766dfa22579c2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4395f14d1af1ba317754bc2ee55fefdf60a44619704dcfc2fff766dfa22579c2.exe
Resource
win10v2004-20240802-en
General
-
Target
4395f14d1af1ba317754bc2ee55fefdf60a44619704dcfc2fff766dfa22579c2
-
Size
173KB
-
MD5
f81215d3e0dd3919dff45b390111dead
-
SHA1
b47e1117e203649ee5570da5e6feaef2803b6231
-
SHA256
4395f14d1af1ba317754bc2ee55fefdf60a44619704dcfc2fff766dfa22579c2
-
SHA512
b5c8f64789665eb8b1fa6c89c1f02c32811a128eaa562a279cd5acae7a509ae5b6ef53e9ac75b949e1b191a7b14ade2ddbc1bd15cdab9b536dc61ced5c0020f0
-
SSDEEP
3072:F6yRrL4pgCADIf9VTgJ7qsAqLuN/cuWOQL4+XEIkwe+K:F6yRVm9VMosAqiEuOLUZDn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4395f14d1af1ba317754bc2ee55fefdf60a44619704dcfc2fff766dfa22579c2
Files
-
4395f14d1af1ba317754bc2ee55fefdf60a44619704dcfc2fff766dfa22579c2.exe windows:4 windows x86 arch:x86
b13545902a33a4fce97c4e9afd63445d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
msvbvm60
ord696
Sections
pec1 Size: 167KB - Virtual size: 500KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 956B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE