Static task
static1
Behavioral task
behavioral1
Sample
010329cf5d9b4b64eb7dbfaf07dd964f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
010329cf5d9b4b64eb7dbfaf07dd964f.exe
Resource
win10v2004-20231222-en
General
-
Target
010329cf5d9b4b64eb7dbfaf07dd964f
-
Size
26KB
-
MD5
010329cf5d9b4b64eb7dbfaf07dd964f
-
SHA1
297f2c96a965c38b9a55de8eaf7417650f8c5f5a
-
SHA256
e7f2d24163aac76c0a606d3d7b795d3d54e14e6cda692ba34d5ca37c3c1b337c
-
SHA512
9291ae2fbef3693fcf7be1de2b3c80091fc0a692a4fe1e44850b3bdceb20121a15c72efa0af6b38d6fcce2d48e7467a03eb6d3793e1551e70535cc4b4154c293
-
SSDEEP
768:fVqPogXOaaQv+Yj8M8u0IDMl96R5xRhfSCI:bgX8QG5MBgfE5xHq3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 010329cf5d9b4b64eb7dbfaf07dd964f
Files
-
010329cf5d9b4b64eb7dbfaf07dd964f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PUNiSHER Size: 29B - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ