Static task
static1
Behavioral task
behavioral1
Sample
418302292853711f8f78d484990f8f42.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
418302292853711f8f78d484990f8f42.exe
Resource
win10v2004-20231215-en
General
-
Target
418302292853711f8f78d484990f8f42
-
Size
352KB
-
MD5
418302292853711f8f78d484990f8f42
-
SHA1
ae12d43e7720a098e23208aca6b670e4bdd2f62b
-
SHA256
e4fb2570c8e47ea65ccc42f27d47500470bd6ce4d8e7435241df1cb87fc4d960
-
SHA512
851bb3b1b09ed1c87238f2034cca3df8df9052d6131e8eb00f820ccec4afcae88858fcacac72aab473fbb84ee067cdeb64fecc18a33d660173fd88dc4a0d2d8c
-
SSDEEP
6144:/xrEmcTGAI2Ua3UbF50crbHZjb1Vz8JqsPW903O6+ZShfCgAZZ:+s/bF50crb5jb1VgJqZ9XShfC/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 418302292853711f8f78d484990f8f42
Files
-
418302292853711f8f78d484990f8f42.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 980KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE