Static task
static1
Behavioral task
behavioral1
Sample
035f63d47777a4e59625d8e0451e1914.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
035f63d47777a4e59625d8e0451e1914.exe
Resource
win10v2004-20231215-en
General
-
Target
035f63d47777a4e59625d8e0451e1914
-
Size
12KB
-
MD5
035f63d47777a4e59625d8e0451e1914
-
SHA1
138ad8a3e81053bd9d0f1303665c255b01dd9ba1
-
SHA256
73f28c8be266eb0c616eb00e74a5414c5f66f475b765b463b8de197fcb44517d
-
SHA512
facc39305f1a246299799683b6a9b4e644be57c59cad5fd8d72959d76a25095e0bf8b2590a80d12d3163301b1924db8019ceda74bc3e3fee7ce0a88ef778929d
-
SSDEEP
192:neYgalUd/TE9WhjS3akgRPyKXz0rCT6hGqrKUpt9z:TZzchjSq/FyS4rCTArDpDz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 035f63d47777a4e59625d8e0451e1914
Files
-
035f63d47777a4e59625d8e0451e1914.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PATCH Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ABCAABCD Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE