Static task
static1
Behavioral task
behavioral1
Sample
431896dd0061939b0a57fa381720ddc0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
431896dd0061939b0a57fa381720ddc0.exe
Resource
win10v2004-20231215-en
General
-
Target
431896dd0061939b0a57fa381720ddc0
-
Size
274KB
-
MD5
431896dd0061939b0a57fa381720ddc0
-
SHA1
d0734f77abe99b2d5a2b6e3c29f0622078a2a68f
-
SHA256
e661c9062d2c270db53cd33f9c481990a7c7112be0337cc8d3acd0d0012cf2ae
-
SHA512
509be5f6b161e598a0aeacb265eac26e2e5896bc5de5e3efea3c0ed4f3f6b70d2c91461b67f42601594404b0a9ba16ec1e2253db9a6d016e571cfc2caf463bda
-
SSDEEP
6144:HS/5xBrQfR7J0Erl2J0ErlWJ0Erl0J0Erl:ZJ2JWJ0J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 431896dd0061939b0a57fa381720ddc0
Files
-
431896dd0061939b0a57fa381720ddc0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 195KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ