Static task
static1
Behavioral task
behavioral1
Sample
d4335d48dac96f9a8fa27c16dfedd780508aa06c5f8d65192e438aa324c9d427.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
d4335d48dac96f9a8fa27c16dfedd780508aa06c5f8d65192e438aa324c9d427.exe
Resource
win10v2004-20230220-en
General
-
Target
d4335d48dac96f9a8fa27c16dfedd780508aa06c5f8d65192e438aa324c9d427
-
Size
516KB
-
MD5
dd1dbae89b7cde6fa3005ba661e3f8cf
-
SHA1
5b37fc1a957fdb1c61a32ecc8e95ceeb1f919235
-
SHA256
d4335d48dac96f9a8fa27c16dfedd780508aa06c5f8d65192e438aa324c9d427
-
SHA512
6a08f73d397a3094b5c9c474ecdaf3b200d08a4199daebf4a7828a239fde1749797cb219dedab9257f10420d7fa7849cbbdd5d0eda4d274d08b3ffe2342f8725
-
SSDEEP
12288:rhDqHRq1iX9d8lgD9WMFevkhN5M6IZO5PPhyAnXW9h:NYRq1S9GlgDk+nhnnIZO/nGz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4335d48dac96f9a8fa27c16dfedd780508aa06c5f8d65192e438aa324c9d427
Files
-
d4335d48dac96f9a8fa27c16dfedd780508aa06c5f8d65192e438aa324c9d427.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 515KB - Virtual size: 516KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE