Static task
static1
Behavioral task
behavioral1
Sample
1482b85ec433239eed2c20159f0de78c71bb06a932a895c02e62d47e2db688c7N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1482b85ec433239eed2c20159f0de78c71bb06a932a895c02e62d47e2db688c7N.exe
Resource
win10v2004-20241007-en
General
-
Target
1482b85ec433239eed2c20159f0de78c71bb06a932a895c02e62d47e2db688c7N
-
Size
91KB
-
MD5
65df5901b6f81566c38b8aa037dd49e0
-
SHA1
26c9d59c344b18497ee3de97d6a26836789f7b11
-
SHA256
1482b85ec433239eed2c20159f0de78c71bb06a932a895c02e62d47e2db688c7
-
SHA512
514332a52ba76f81dd228b5cee53f69a9c4131c1153c435b470583cc000de56f753cb1a3546c3231eff13f5018ac1b7af4c7e2577c74b9d2942a95567af39fbb
-
SSDEEP
1536:1AwEmBT4JzRJwEeUW7f12xULgJz1oxAwEmBT4JzRJwEeUW7f12xULgJzA:1Gml41LBu7f1WNSxGml41LBu7f1WNA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1482b85ec433239eed2c20159f0de78c71bb06a932a895c02e62d47e2db688c7N
Files
-
1482b85ec433239eed2c20159f0de78c71bb06a932a895c02e62d47e2db688c7N.exe windows:4 windows x86 arch:x86
b876114877b29a61f9955d83081f159a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord516
Sections
.MPRESS1 Size: 28KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE