Static task
static1
Behavioral task
behavioral1
Sample
79d6b5e21068d417df98084a3060288a65f0c32b267beca496997f44646648d2.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
79d6b5e21068d417df98084a3060288a65f0c32b267beca496997f44646648d2.exe
Resource
win10v2004-20230915-en
General
-
Target
79d6b5e21068d417df98084a3060288a65f0c32b267beca496997f44646648d2
-
Size
492KB
-
MD5
1d4d8b513a89edd3cc8203c7c31242c7
-
SHA1
f4657629456c65838eb401cbf35451e02e4d204a
-
SHA256
79d6b5e21068d417df98084a3060288a65f0c32b267beca496997f44646648d2
-
SHA512
af129225e602414945968bcfcccb9093b937063bfac554468062d9a5f2c4022d2500ecfa44470852ceb9c0c3d5ca7600a629b65ccf33f6c91c36f512a3c435d7
-
SSDEEP
3072:zlAyL9W0EKYKXAMmftffjmNLOlAyL9W0ElYKXAMmftffjmNL:HL5EAQMeVfjmNLkL5EjQMeVfjmNL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d6b5e21068d417df98084a3060288a65f0c32b267beca496997f44646648d2
Files
-
79d6b5e21068d417df98084a3060288a65f0c32b267beca496997f44646648d2.exe windows:4 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.Upack Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 284KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE