Static task
static1
Behavioral task
behavioral1
Sample
79ec91481d38caf6e628bf290d4acc90.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
79ec91481d38caf6e628bf290d4acc90.exe
Resource
win10v2004-20231020-en
General
-
Target
79ec91481d38caf6e628bf290d4acc90.bin
-
Size
493KB
-
MD5
79ec91481d38caf6e628bf290d4acc90
-
SHA1
9e1158255f204302206166cd6153fd4f12cd7972
-
SHA256
c4078d8d9071c2dc0d4bf0f09f3adb32b3c21c3ae1952f53d13bdba4654113f7
-
SHA512
7d30e54d59da68a0c18eab57c7685d897b4c27b7b995c58eda065daa34ff25e6ef997ce45c1b34dde7c174d4c19c00a7124a694ced0ef9fcd4b073d39eb00c1b
-
SSDEEP
6144:53OOCKLlcPKJEld2zJQPfuSlMHyaXXu6FQGkcC+V5R5azYBONNYJIBtFc:FOOZpUtlwX+zc7V5Rn1JY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79ec91481d38caf6e628bf290d4acc90.bin
Files
-
79ec91481d38caf6e628bf290d4acc90.bin.exe windows:1 windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.MPRESS1 Size: 440KB - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE