Static task
static1
Behavioral task
behavioral1
Sample
7ae1be90a6848b5445d71ee0cab110e4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7ae1be90a6848b5445d71ee0cab110e4.exe
Resource
win10v2004-20231215-en
General
-
Target
7ae1be90a6848b5445d71ee0cab110e4
-
Size
97KB
-
MD5
7ae1be90a6848b5445d71ee0cab110e4
-
SHA1
de9b5a819c26d807ba4a9766f33bedb81d29dbd5
-
SHA256
55966a003fcefd01a39f7cc102b31a30df65c8d9ae7f8ff560f36e0e278242a6
-
SHA512
5aa2760e0dd23d4756385b7d566736dffd9082debe0be3059512ec2b39ca6b9439ca2cb5a87102425fc74096da3af81946ef424d5e93aaa35750093191f6a22e
-
SSDEEP
1536:BoLWrIHTBzT7vwmnLPno4jvp58h2RyfRG8ds4siY4VO4Ae/ceN/3AcjES4C+E:lkxNnLPndY2RGG8dnsi9Oud3w3C+E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ae1be90a6848b5445d71ee0cab110e4
Files
-
7ae1be90a6848b5445d71ee0cab110e4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES6 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RES9 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES5 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES7 Size: 512B - Virtual size: 257B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
RES4 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ