Static task
static1
Behavioral task
behavioral1
Sample
433ee7a9e8599de7ccf4dcc20797b4f8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
433ee7a9e8599de7ccf4dcc20797b4f8.exe
Resource
win10v2004-20231222-en
General
-
Target
433ee7a9e8599de7ccf4dcc20797b4f8
-
Size
515KB
-
MD5
433ee7a9e8599de7ccf4dcc20797b4f8
-
SHA1
8e0e547e684608c6d876f71fb033d6029802302a
-
SHA256
1107e657da36c52a7cae4e72cdc08f6dcf0f009555a9c179b489f821b6e8b1bd
-
SHA512
f1c4fd6833f609c497efcc4d8083809caa7792b59464380f9bf7ac62baffb114505965c6d21752533eec470c979805a09c5fb74be98bbfcc3e1d42dfcaf3e09d
-
SSDEEP
12288:oNlQN66w1RC39vTNig1UD4I3fC6hYY8DrkHjlLycwXQcRBhBbe0j:o0Qg91eBhYWHjlPwXQQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 433ee7a9e8599de7ccf4dcc20797b4f8
Files
-
433ee7a9e8599de7ccf4dcc20797b4f8.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 246KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 302KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 544KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.gda Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE