Static task
static1
Behavioral task
behavioral1
Sample
026a64cb226e31756f8923e05682cf20.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
026a64cb226e31756f8923e05682cf20.exe
Resource
win10v2004-20231023-en
General
-
Target
026a64cb226e31756f8923e05682cf20.exe
-
Size
1.5MB
-
MD5
026a64cb226e31756f8923e05682cf20
-
SHA1
2cbee586c940d3d2064378a695f22233e61d6e52
-
SHA256
d00ce24c2247f013e0b4be637da8e44cda7b22cd074acf45e0949995c73c004f
-
SHA512
72234cd0472d09a863ad58efbe1fb77fabf7f38c712bc7b49d1c36c41135f72f941c6d98c27ab45ddd4ee1b095a8d65ab8261a626f2a6c68d9a9fe3978d99b40
-
SSDEEP
24576:Fs7havN1zouXl6d655/t1NB+u1HGWkHGWvPaGPkZm9AFnhf4S9bZi/9:OFQ1zoaNvtvAXaMkZiArf4S5Zi/9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026a64cb226e31756f8923e05682cf20.exe
Files
-
026a64cb226e31756f8923e05682cf20.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.... Size: 584KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
...` Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.!rc! Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.code Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Silvana Size: 410B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 38KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ftsafe Size: 461KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE