Static task
static1
Behavioral task
behavioral1
Sample
10d35fe1d8cc0de132ba4b80d06faf2e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
10d35fe1d8cc0de132ba4b80d06faf2e.exe
Resource
win10v2004-20231215-en
General
-
Target
10d35fe1d8cc0de132ba4b80d06faf2e
-
Size
576KB
-
MD5
10d35fe1d8cc0de132ba4b80d06faf2e
-
SHA1
4e84b5316a4688619d814257a06ed3c7229f6b1f
-
SHA256
e419d4c6b06ebee4cae25787aca683eb835306b94a688cd38f93d235e8f07052
-
SHA512
45162ab75ea6b33b8d27ac9f1b8ccc437f70f903cf870889af7284a4ac23ae3b518f7042750821cfdab2551daf5549dbc69f74e762ae507f96289efb56dc05b4
-
SSDEEP
12288:Z24YS4dxJC+X4h5OBIUcBvKcBIjxuVtXd/cOWadx1RByRuiXGTSQNGpYzCpz4Bu:fYS4d+/HUWBejoLRcOWadnEBQNHCpx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10d35fe1d8cc0de132ba4b80d06faf2e
Files
-
10d35fe1d8cc0de132ba4b80d06faf2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.CODE Size: 5KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 640.0MB
.iykymr Size: 558KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ