Static task
static1
Behavioral task
behavioral1
Sample
dedba1b5d702456c0aeb8a786fe1f8a0_exe32.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
dedba1b5d702456c0aeb8a786fe1f8a0_exe32.exe
Resource
win10v2004-20230915-en
General
-
Target
dedba1b5d702456c0aeb8a786fe1f8a0_exe32.exe
-
Size
304KB
-
MD5
dedba1b5d702456c0aeb8a786fe1f8a0
-
SHA1
39aa58567e8f55de17aad746b94c17b385f32d80
-
SHA256
2bb45c2d0c18c81df6a1e781bc7c8ca2ffa3ad144fa1026be0b7fd2d1e83485f
-
SHA512
e02ef364d1a763c87c6ae7f55d91952ee915e32ea670be3e91b2870fd16212d8ee7d7e330e4ca5750690a83e5ebbcd26b5c86eebfc191dff1bc71952c8a763f6
-
SSDEEP
6144:o5K1JGIyRJFeJLbnCBbC+nVLjOPj194oQAPJiduHyFfeoHiWmVlWaPxqZcNpCLh:zvGznFeJLbnCN3xjOPj1Gg2uHyFfeoHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dedba1b5d702456c0aeb8a786fe1f8a0_exe32.exe
Files
-
dedba1b5d702456c0aeb8a786fe1f8a0_exe32.exe.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ