Static task
static1
Behavioral task
behavioral1
Sample
7991bed2d0516164218651281c5606ff.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7991bed2d0516164218651281c5606ff.exe
Resource
win10v2004-20231215-en
General
-
Target
7991bed2d0516164218651281c5606ff
-
Size
325KB
-
MD5
7991bed2d0516164218651281c5606ff
-
SHA1
f5dfdca4476ef717bb76f54d00b6645cdce2218e
-
SHA256
3bdbecdb8ceb2498b40fe6b2d907bfd05ef03c770b9b729cdc9941243ceb9928
-
SHA512
4923cd74475ef7961496e7728a0e3dc2876404c7a9700f886d20005256c2447a124a211495a2eb6552e9864fb7d6a2492005065194705f4d1e5e07a61e706d0e
-
SSDEEP
6144:L0G8rwdG4T38iUQWypf+T9+J6D0HPTAgCNnVW5GJZ2tNYLj8Mfscq8aJ7SW2iaN:g3iGhiUQWypGT9c6AbAgCVVzYKj86sc/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7991bed2d0516164218651281c5606ff
Files
-
7991bed2d0516164218651281c5606ff.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 102KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE