Static task
static1
Behavioral task
behavioral1
Sample
72ea802d55a96e659b1692d09947f479.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
72ea802d55a96e659b1692d09947f479.exe
Resource
win10v2004-20230915-en
General
-
Target
72ea802d55a96e659b1692d09947f479.exe
-
Size
3.9MB
-
MD5
72ea802d55a96e659b1692d09947f479
-
SHA1
ebd8da2e4432624da17492b35ad62c7b78580075
-
SHA256
8a8678aef5bb4c6025be688f2750ce39869b0cd027be0acf3e53afd8ff742142
-
SHA512
a98ecd0c865e7b26c3712926f055e75f896f4e846fd04a9450bd6e5dab395caef7df4eb9f6a2280e7eb8806020c4d0e3bdacbfba6bf8d7c7817b2eede605a90b
-
SSDEEP
98304:E+r6g4l2S+UDP1iM36EWXNnYL+2WtW6+wZrDUVVS1C:Ew/SpNiMKEmNnYBoWzwhYVVgC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72ea802d55a96e659b1692d09947f479.exe
Files
-
72ea802d55a96e659b1692d09947f479.exe.exe windows:6 windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.MPRESS1 Size: 5.6MB - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE