Static task
static1
Behavioral task
behavioral1
Sample
629dd9e14f2a86f69a3daae0378130ee.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
629dd9e14f2a86f69a3daae0378130ee.exe
Resource
win10v2004-20231215-en
General
-
Target
629dd9e14f2a86f69a3daae0378130ee
-
Size
1024KB
-
MD5
629dd9e14f2a86f69a3daae0378130ee
-
SHA1
db239818a9c286f06989b9de4d6105e88bce1c68
-
SHA256
e1d0a49f82902c822a37bb95c5564f33440a38908f2be294ef59bf2b2020e688
-
SHA512
9d427e2a5fff80aa7d1f485701ed1067728ee8bbef33f12b8be8ef972abee8d08b46c080e16d6c9900c3474190f498d7b59233a3503673da9a02db546c6c83a7
-
SSDEEP
24576:zF8lvBLdP8W1TEFJhRf0edqfa5nJ8g3IRT38cr7:zF8lvBLtEHhGanz3WTMcf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 629dd9e14f2a86f69a3daae0378130ee
Files
-
629dd9e14f2a86f69a3daae0378130ee.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 382B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE