Static task
static1
Behavioral task
behavioral1
Sample
ed54d2770253620372295c3516a37db5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ed54d2770253620372295c3516a37db5.exe
Resource
win10v2004-20231215-en
General
-
Target
ed54d2770253620372295c3516a37db5
-
Size
655KB
-
MD5
ed54d2770253620372295c3516a37db5
-
SHA1
5287c31dbcd1e831c32235df7700672a3dc3db42
-
SHA256
5f0f6ea4019a859d61a800b1d169763b54d08d7c1e2647c5f1e3066adb870372
-
SHA512
7d5cc285f04c93a940b15722bf0c92c1101ba9674da8d2359c3d3689d940be495fe4023ea989db7c80b2df419a9a9d8cffee5da5facc5e2c0009658b89ed9eeb
-
SSDEEP
12288:prWdXWf5klT97iK7Iayzjho/KbGnQ2sTM5Dyzgf878t3hiVR7s3K4ol6FvDvg:prNfs2jhHJiFv8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed54d2770253620372295c3516a37db5
Files
-
ed54d2770253620372295c3516a37db5.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 846KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ