Static task
static1
Behavioral task
behavioral1
Sample
7e1aed606441522b9077b11655547940.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e1aed606441522b9077b11655547940.exe
Resource
win10v2004-20231215-en
General
-
Target
7e1aed606441522b9077b11655547940
-
Size
72KB
-
MD5
7e1aed606441522b9077b11655547940
-
SHA1
1635620f2fa3f886614ad4e7de76704b25f44d18
-
SHA256
e81fd04ced5a1ca0e0dd0d2ad5c8a346383c230471e6885131f0b1337b88f3b7
-
SHA512
c7cf0038c9d5618d0b56b617aa34f04b79f2e4496e60ff5c9f024bdc5ba4cec539ce32d8f9ce50ee33eb3b1c89f20679dacb0051f4f1f9123790df278e6b83a0
-
SSDEEP
1536:PVLrnIW/6wgXP0kk1WeSw487MOuBk/pAASQJKFmUnAxlY20Tpa:PV3nbCwYPVeSDbOuaTSUyFnAxlYPa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e1aed606441522b9077b11655547940
Files
-
7e1aed606441522b9077b11655547940.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 555KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE