Static task
static1
Behavioral task
behavioral1
Sample
042dec8be7702efb9819c4d42fedb087.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
042dec8be7702efb9819c4d42fedb087.exe
Resource
win10v2004-20231215-en
General
-
Target
042dec8be7702efb9819c4d42fedb087
-
Size
385KB
-
MD5
042dec8be7702efb9819c4d42fedb087
-
SHA1
d40347ad6dd932c72c8e1c955a178e0103ede949
-
SHA256
5ea10b7469352d2ad7ef4bee3ff509881a76e1fc66b9a3a4ddcb0b56dfc9fbbe
-
SHA512
43ce83d347268de56d0520416e0eae30141601bb88e5eda21abc869a1e3cb3860356ae3a9b0a839320e5ae18b0d51b8c4f7398fae876a01a32c2b171c5e2b8c4
-
SSDEEP
12288:TO4KS4V2wI3DAtx4VVZFnuRvMMHQFxM1zjcB:TwITix49FnqdwFGjcB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 042dec8be7702efb9819c4d42fedb087
Files
-
042dec8be7702efb9819c4d42fedb087.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ