Static task
static1
Behavioral task
behavioral1
Sample
1d4b18074aa3d958adb6f52e8ba7e37cf6bc799d46784734275cf476a2867622.exe
Resource
win7-20241023-en
General
-
Target
1d4b18074aa3d958adb6f52e8ba7e37cf6bc799d46784734275cf476a2867622
-
Size
2.1MB
-
MD5
bee0398363217eaedbdee4b83e5909fd
-
SHA1
eeaf4acab9a4d247bb3513110dfffe370301763e
-
SHA256
1d4b18074aa3d958adb6f52e8ba7e37cf6bc799d46784734275cf476a2867622
-
SHA512
da608822c3c570f8fe62a10d0b76ed3c706271ff7f22c4ee7c844a5b5e9af48c736d8cf12a393ba3d390e6dd3ed70b26c43a1ab60061812661855fb6183ae22b
-
SSDEEP
49152:qtACGnO8DYVanUCV9RR2z9TRAiuLjFIWgUWPt5lVU0Eo:qtQnOaUC3q9ojMfP00Eo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1d4b18074aa3d958adb6f52e8ba7e37cf6bc799d46784734275cf476a2867622
Files
-
1d4b18074aa3d958adb6f52e8ba7e37cf6bc799d46784734275cf476a2867622.exe windows:4 windows x86 arch:x86
0ee1e94ff5fc00d6471ba1745e730373
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvcrt
__getmainargs
user32
wsprintfA
Sections
.text Size: 100KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 650KB - Virtual size: 652KB