Static task
static1
Behavioral task
behavioral1
Sample
fc7364ed0dd43ef16add335cf797c04400a0a72849b5a114ada5eceab21c51a3.exe
Resource
win7-20240903-en
General
-
Target
fc7364ed0dd43ef16add335cf797c04400a0a72849b5a114ada5eceab21c51a3.exe
-
Size
334KB
-
MD5
7919db663575c44ebedc0505adb9a665
-
SHA1
b7d3f6dd41263dde9f0f97d53e2095ddee82fd60
-
SHA256
fc7364ed0dd43ef16add335cf797c04400a0a72849b5a114ada5eceab21c51a3
-
SHA512
384bb161c54c4c64edec96f852b6042e375452e862025c7e6c0c6d783852986c039d781cca68232ce2363d22b8e4531bb00f411f3d5352db1a95fd47eaf3b9f7
-
SSDEEP
6144:kxa4ZWcFIXqwk9N95L2plx0BmXdgg4hAVVPFx0XFxg5ylqSTQ97gY4XmUryoN44B:SZhFEqN5LGxttEur4FeSqhMXyoN/Xx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fc7364ed0dd43ef16add335cf797c04400a0a72849b5a114ada5eceab21c51a3.exe
Files
-
fc7364ed0dd43ef16add335cf797c04400a0a72849b5a114ada5eceab21c51a3.exe.exe windows:4 windows x86 arch:x86
d6a022763f44013440a820232d928b0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
Sections
pec1 Size: 329KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE