Static task
static1
Behavioral task
behavioral1
Sample
efa76b7b1ac6fdfdf9f5f0247e0bcfff98e3a814862f9a3b626610655233542f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
efa76b7b1ac6fdfdf9f5f0247e0bcfff98e3a814862f9a3b626610655233542f.exe
Resource
win10v2004-20230220-en
General
-
Target
efa76b7b1ac6fdfdf9f5f0247e0bcfff98e3a814862f9a3b626610655233542f
-
Size
20KB
-
MD5
173cac8e8237acf19d5dff38faf55d83
-
SHA1
7013d8d1ed189fbf23b62dd9059f6bd1a4aa9b06
-
SHA256
efa76b7b1ac6fdfdf9f5f0247e0bcfff98e3a814862f9a3b626610655233542f
-
SHA512
2c5268985a3e7dc883acb08d292d8ebaf70ac1210ff2a376ff66e7a216cd16e74fe878e05e8e85a73f638a93937cb13ac8cca2d6475a3997b9365d397a609cbb
-
SSDEEP
384:j2isYY3wdW9yXf/zn6IK4TCjMMwhWCV8r:SNl3KRzn7eK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa76b7b1ac6fdfdf9f5f0247e0bcfff98e3a814862f9a3b626610655233542f
Files
-
efa76b7b1ac6fdfdf9f5f0247e0bcfff98e3a814862f9a3b626610655233542f.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE