Static task
static1
Behavioral task
behavioral1
Sample
d79389e63dc5c1fd0faef5e805ab21dfa48a6cf88f924d529ecaf7133ba8b6e1.exe
Resource
win7-20231129-en
General
-
Target
d79389e63dc5c1fd0faef5e805ab21dfa48a6cf88f924d529ecaf7133ba8b6e1
-
Size
195KB
-
MD5
03910be155715e12725197d4d437cfb9
-
SHA1
23f63364b2b233dfe2658ec114360a21ae1adac4
-
SHA256
d79389e63dc5c1fd0faef5e805ab21dfa48a6cf88f924d529ecaf7133ba8b6e1
-
SHA512
7b0b7521252203606eb86613b58ccbb76f388a098c6e50075cda0dc1d76c266018b49e003bf2c779da869266feaae9f5660a85c0a150e771c9e45b787423af75
-
SSDEEP
3072:a9ftffjmNn9ftffjmNX8d2frmr05VbLuYK651fvhC2arf0X5Jzt8d2frmr2nil:aNVfjmNnNVfjmNZS05U367h3XrnS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d79389e63dc5c1fd0faef5e805ab21dfa48a6cf88f924d529ecaf7133ba8b6e1
Files
-
d79389e63dc5c1fd0faef5e805ab21dfa48a6cf88f924d529ecaf7133ba8b6e1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE