Static task
static1
Behavioral task
behavioral1
Sample
72a041436ddf8352892c4a609751c0c9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72a041436ddf8352892c4a609751c0c9.exe
Resource
win10v2004-20231222-en
General
-
Target
72a041436ddf8352892c4a609751c0c9
-
Size
877KB
-
MD5
72a041436ddf8352892c4a609751c0c9
-
SHA1
93fc972cd3d87cd6a149ed0bd54ab049b8130317
-
SHA256
70b5565bfff35058ebdaf91f1e90dbd6f859a36f7dbdfe7615ad9beea476e39f
-
SHA512
096b3fa8d8f791fa4c2054382cde4c9b890067b98c112d420850ffa029c56ee6f470a1a20d4560fd05e386cf79ed64a4f3960f29a2dd339f4a429b6558882020
-
SSDEEP
12288:UZWtI6RkcuVyOB03erQZb+md4w1UWOB0H:UuhaVyOaerQZb+md4wmWOM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72a041436ddf8352892c4a609751c0c9
Files
-
72a041436ddf8352892c4a609751c0c9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ