Static task
static1
Behavioral task
behavioral1
Sample
462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e.exe
Resource
win7-20240903-en
General
-
Target
462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e.exe
-
Size
60KB
-
MD5
cf0b6625f578dfc2398ee4314c2f1ef0
-
SHA1
5adcba2d06e9bb9eb079a872f8551fe16c54af12
-
SHA256
462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e
-
SHA512
d194cd9c78ce3c9918404c10bb9b7294f4577ce68667ed07c15ff85fc16d053ed665f3a01d1ec6db0f6bdc1e68d79b9eb523f33fda9d59da5952705c727a4736
-
SSDEEP
768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPN:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e.exe
Files
-
462257c517ae085cd0df88b277fe797b79aa532c9985e899894a60bca40a596e.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
HSUDHUHW Size: - Virtual size: 148KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
HSUDHUHW Size: 57KB - Virtual size: 60KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE