Static task
static1
Behavioral task
behavioral1
Sample
70ef02e912c30eaa65ad747c47468cfe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70ef02e912c30eaa65ad747c47468cfe.exe
Resource
win10v2004-20231215-en
General
-
Target
70ef02e912c30eaa65ad747c47468cfe
-
Size
16KB
-
MD5
70ef02e912c30eaa65ad747c47468cfe
-
SHA1
3fe469070ec7260b70de34e1bd7d87033914e7d1
-
SHA256
e801b5c64c2f27744b6b832835e373d4ba77ed9575969b3013959684aea0dcb1
-
SHA512
a4966443b407fed474fb521092f976a7166482c860ad36828228849108af4de5a7d6367a1a0e628cc5dffcd68ad9aedacbb704db070a2efa4270d80856d3f60b
-
SSDEEP
192:lYpgVeERMwjwOBERLj3lvotgX8I+64sGT40/FFySvTB8BO44IV+kgHAjJVpsliCZ:QgVe8MswPjqg4sGTD/zvO6Lm3GlnTN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70ef02e912c30eaa65ad747c47468cfe
Files
-
70ef02e912c30eaa65ad747c47468cfe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ