Static task
static1
Behavioral task
behavioral1
Sample
70ca3c8b37e5014cd265a692aca21fdd.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
70ca3c8b37e5014cd265a692aca21fdd.exe
Resource
win10v2004-20231222-en
General
-
Target
70ca3c8b37e5014cd265a692aca21fdd
-
Size
62KB
-
MD5
70ca3c8b37e5014cd265a692aca21fdd
-
SHA1
683bb0b2fc2dccb9e256eda5431ab724789b8ecb
-
SHA256
eb008ee4f79df3dc64ed5fac2664db54426285fb3e501dfe2d50a98e9799b59f
-
SHA512
fa5e2ae510fbdf9c9487e32ca045923e5c1b288cd59293dae64a03de08d244474f243d333653f4c8e5b316f713db11d888a77feb21aa8941cd300ad5e2cb7e03
-
SSDEEP
1536:EYa3ZHTdFQjlkCx03mtAYqN4BhyVkw9PyeE:EYa3vuAYqNsed4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ca3c8b37e5014cd265a692aca21fdd
Files
-
70ca3c8b37e5014cd265a692aca21fdd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 32KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.upx Size: 16KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
naN Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE