Static task
static1
Behavioral task
behavioral1
Sample
0679012d1f44e9914e9c4fe33d4b2048.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0679012d1f44e9914e9c4fe33d4b2048.exe
Resource
win10v2004-20231222-en
General
-
Target
0679012d1f44e9914e9c4fe33d4b2048
-
Size
855KB
-
MD5
0679012d1f44e9914e9c4fe33d4b2048
-
SHA1
169004b6caef0ba83c27c4b05c8153d0d6ac5966
-
SHA256
13a927b9eaf3c5a2cf45580553e76f7a2bdfcfb6ebe0add4d33e0b36e81baff4
-
SHA512
8b7510d38dd45497e1036000e3101277256b2b133f9f2611df6e669ca477bcf010f2617dc4853b67a58803ed9bcec5bb667a50280b7a25d95353fed6eb90a91b
-
SSDEEP
12288:bQRgU/W2YP9b4SXZXYFfu8FJXECwpo/4v5xYYJ1bQ8fPX0O2IcWhGJi+m:bQ2RPUSByzFxkZvz9rFkRe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0679012d1f44e9914e9c4fe33d4b2048
Files
-
0679012d1f44e9914e9c4fe33d4b2048.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 632KB - Virtual size: 631KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ