Static task
static1
Behavioral task
behavioral1
Sample
797e59eb1d2423ebf94f9830bc93be07.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
797e59eb1d2423ebf94f9830bc93be07.exe
Resource
win10v2004-20231215-en
General
-
Target
797e59eb1d2423ebf94f9830bc93be07
-
Size
430KB
-
MD5
797e59eb1d2423ebf94f9830bc93be07
-
SHA1
5cce77852e763e2553b4d0eea390de2c10431132
-
SHA256
af262b5a27dbb799b9f35518e80dbbdb69ad67111461f2dbb93fd49fbcff5b14
-
SHA512
e9e68f5dd69e9751b93df1e94d9873e8c05089e3e8c3c5b8128e11797739ea9aa27e8a8beaa1952bfdc1e31c0bb7220211a1cb8948ea812db33c2ec3b542c8c6
-
SSDEEP
6144:Ulsy4TNbEm1B1zzqaCh9Ju/2x+vw0b8ajNglS2+gUXpP9YC4r:UdwNIm1B1zzqrh9Jf+btwSfgUnBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 797e59eb1d2423ebf94f9830bc93be07
Files
-
797e59eb1d2423ebf94f9830bc93be07.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 269KB - Virtual size: 277KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ