Static task
static1
Behavioral task
behavioral1
Sample
c970dfafde6a76dea9b5e4787a0884fb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c970dfafde6a76dea9b5e4787a0884fb.exe
Resource
win10v2004-20231215-en
General
-
Target
c970dfafde6a76dea9b5e4787a0884fb
-
Size
184KB
-
MD5
c970dfafde6a76dea9b5e4787a0884fb
-
SHA1
5a548b27cb2bcc6cb2db5aa89127f42fc80e6dec
-
SHA256
682c4713afb9f9c9f09062434c0d44a136e6e533e85b1b7d271ff694732d2bda
-
SHA512
b9b2f27603143a22a641de63b06f2f5cc33544d9c39f98a56403ea14c048b882bdb156eb12ff7b0c0d6624be2a372f1c35704d1400bba434339558e1db4ac78c
-
SSDEEP
3072:a1Czoz/5fhApryj2dOi0wZFp3da6aP5FR8ux8HIhEklPvpFV:a1OoFOprZdl0wZq/YlklPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c970dfafde6a76dea9b5e4787a0884fb
Files
-
c970dfafde6a76dea9b5e4787a0884fb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ