Static task
static1
Behavioral task
behavioral1
Sample
479b8d09145330c774fc8979465b5c7b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
479b8d09145330c774fc8979465b5c7b.exe
Resource
win10v2004-20231215-en
General
-
Target
479b8d09145330c774fc8979465b5c7b
-
Size
256KB
-
MD5
479b8d09145330c774fc8979465b5c7b
-
SHA1
5bbd85ea18661f06b11cb8c44a526b01e0741288
-
SHA256
7e071d198d6d01bfb0ad25bc217ccfa85259efb4cb2437c223c3771b0fd5abb2
-
SHA512
372de2b857691f2811cf81ae499fcbe67bfcfd92bb618f4ceb4026a60efcef72dd603b6172d8bf24aed396cea54f4f5d0ce76c2abb92bfbaf5a7e94d54112129
-
SSDEEP
6144:MfS9olyzCBnLEe75BV8Iq0ckrMVOLv0SymPhlEat6+9YD9N:MfS2lyzCVEg5BVrpgVOLv0wRt2N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 479b8d09145330c774fc8979465b5c7b
Files
-
479b8d09145330c774fc8979465b5c7b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 518KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 337B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE