Static task
static1
Behavioral task
behavioral1
Sample
7d4324c775ec62433e5d54b39978c190.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7d4324c775ec62433e5d54b39978c190.exe
Resource
win10v2004-20231215-en
General
-
Target
7d4324c775ec62433e5d54b39978c190
-
Size
353KB
-
MD5
7d4324c775ec62433e5d54b39978c190
-
SHA1
06b9badbaab887a3b221d0a729b0ab3b860594f6
-
SHA256
e6fe5c6a3b63bc2cb2866b5c77f144e6a6aeb3d2d84577128aef530dc0349c0e
-
SHA512
779d5907f6d348e9ddc26865444e9195b7549b0dfe61c6e0023ed2d0914341c7eeba0a4d678c1989ddf5d2f416819e16cd6ff87603a3667303ee6cd2ec27c406
-
SSDEEP
6144:eEgKKKSKeL04sKAn+codDh4j8bMFG4bPnGGgPG438vg3Dp9SWlB:eEgKKfKe5p/UkEPB4FDp9JP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7d4324c775ec62433e5d54b39978c190
Files
-
7d4324c775ec62433e5d54b39978c190.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.y0da Size: 512B - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.y0da Size: 341KB - Virtual size: 358KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data0 Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ