Static task
static1
Behavioral task
behavioral1
Sample
344f5a8dd8995af79b0c0896ab61ec93.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
344f5a8dd8995af79b0c0896ab61ec93.exe
Resource
win10v2004-20231215-en
General
-
Target
344f5a8dd8995af79b0c0896ab61ec93
-
Size
26KB
-
MD5
344f5a8dd8995af79b0c0896ab61ec93
-
SHA1
0267457da3d60369111b5e1f8a28d36d04aee2fb
-
SHA256
7b9f2a2fcc293ea6aa55aa1684e8b7d06fed9a9eff6a21c8a46d15ecf73e46eb
-
SHA512
bffb26eedd86f9d447f5c0df0848a6a7958cd97ca675399ec2be3016313e9e9e7a7c32d0bc20a81d16ef2218545acf83dc66544fedd94459cbe9fe92d5c277ba
-
SSDEEP
384:WZyrOAVI7cfceEAQ8xZoQg0cHYabIsX3T6/+luv2H5pjnb3Tqgb/a9TPeIP21bQ9:WZJAGc3Edy+IcZRWyPRb3GGatPp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 344f5a8dd8995af79b0c0896ab61ec93
Files
-
344f5a8dd8995af79b0c0896ab61ec93.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
data Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 22KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE