Static task
static1
Behavioral task
behavioral1
Sample
024d8cf38e138eea495137d4a50163d4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
024d8cf38e138eea495137d4a50163d4.exe
Resource
win10v2004-20231215-en
General
-
Target
024d8cf38e138eea495137d4a50163d4
-
Size
3.0MB
-
MD5
024d8cf38e138eea495137d4a50163d4
-
SHA1
340e9028b9f39145b83144a02a93d22a273a842c
-
SHA256
942d80d1a1d6eb7cd7d3dbbfb3425601cb276bb96821086e2f4297d0f19d669f
-
SHA512
138773b21d141ddcd4aa5a3551c21fc58ac8b8fa70e35489b1c18a73173242449d67db9ed7eb7202465c410f8602d231d6242f2700f3bb695514a041488f0996
-
SSDEEP
49152:6YV9zOe4gMYV9zOe4g1wnNTBjsNBk9/fw2BwfmM0fVeOD9u:h9yfC9yf3hsNi9XwgwfoNemu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 024d8cf38e138eea495137d4a50163d4
Files
-
024d8cf38e138eea495137d4a50163d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ