Static task
static1
Behavioral task
behavioral1
Sample
645738f08030586e534173ed05db4343.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
645738f08030586e534173ed05db4343.exe
Resource
win10v2004-20231215-en
General
-
Target
645738f08030586e534173ed05db4343
-
Size
4.4MB
-
MD5
645738f08030586e534173ed05db4343
-
SHA1
fd6ffa7a446a7ba6ddc6913d38eb1d7ad0d3dd84
-
SHA256
be65b56bc8af58beb63ca01ce9e25271c93fa4682316f95070b9ca8300542d73
-
SHA512
e5eb3c8a9eec03f9034c7d1f72852e6ab047e1bfe7450bc4393f2eb7a054956ce87c121ad0278cd2a2f39d63eb2eddbec83a4bd4ac6b95347ab5b84577fba8fa
-
SSDEEP
98304:nkCFB26WKKRHz5YPUc2miAW4YcVj7wzrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrrc:nkCFB26WKKRHz5YPlUAW45VAzrrrrrrU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 645738f08030586e534173ed05db4343
Files
-
645738f08030586e534173ed05db4343.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 256B - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE