Static task
static1
Behavioral task
behavioral1
Sample
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe
Resource
win7-20240903-en
General
-
Target
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe
-
Size
78KB
-
MD5
9c4eae1162b7851bbc0b2ebfe5dd98be
-
SHA1
e454a676c8ee716857a030fbce1c206c4af5f157
-
SHA256
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac
-
SHA512
f38332a38ff54f68209a0a1b6bc4d9224d2b1ef8aa58929ee468b5f44e0a231979b06b289e9ab5e27f3b536be640f708d8cee0e61ee582253259de2f277dcfb1
-
SSDEEP
768:xZU9HZe4JZxPKAgmmE2jmXwTcxlhshya4qCIDWObp2EfoiSCMy6MuHg/wrYaFRdX:xce4ZKAvTwTcshJDzo9LHyUYmdGT/4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe
Files
-
1541622e3a6daa44def2d6cfc916541c03abd8728ee9a6efca45777878661dac.exe.exe windows:5 windows x86 arch:x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
SFFDFDFD Size: - Virtual size: 160KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SFFDFDFD Size: 75KB - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE