Static task
static1
Behavioral task
behavioral1
Sample
35fae2a20d83167bbd20948d1960d641.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
35fae2a20d83167bbd20948d1960d641.exe
Resource
win10v2004-20231222-en
General
-
Target
35fae2a20d83167bbd20948d1960d641
-
Size
76KB
-
MD5
35fae2a20d83167bbd20948d1960d641
-
SHA1
f2270337090f0dd8b7e54d2bdad0f089d7dfd188
-
SHA256
0c553f1fefe23471b24d1342f2650aa560237ca4fd78b4c2772a6f69aea3c1ae
-
SHA512
7bdc189a9adc4d05b364586625f87dcf590c128095968ebf2e026ede8ca269f258af18c83364b71d64978d377fc47b0abeda987e471f182e22d572aa2717c22e
-
SSDEEP
1536:cYXVDy9KqJdYxXimwLZXTtn5KvN8fXcFTFf3eqEa:J+7YxPqZ55KV8/cFYQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35fae2a20d83167bbd20948d1960d641
Files
-
35fae2a20d83167bbd20948d1960d641.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 212B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1018B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccccc Size: 20B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cccc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ