Static task
static1
Behavioral task
behavioral1
Sample
2079ea0b66170d6f2ff428ff951020a8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2079ea0b66170d6f2ff428ff951020a8.exe
Resource
win10v2004-20231215-en
General
-
Target
2079ea0b66170d6f2ff428ff951020a8
-
Size
241KB
-
MD5
2079ea0b66170d6f2ff428ff951020a8
-
SHA1
e67cbf27579b015eacd4091dde743cbf63aa1d27
-
SHA256
8f38d838af274174b25d44be749041755f114b8ba31f9256bf31a72b5b434dd6
-
SHA512
03250d6658f2479e0da41d29b7141e9bf175ec01693b769300942850431fa0ea10f3e71b33b47320c496b25abdacf37d9b25b8bf1b568eaaa34a492df05fb52d
-
SSDEEP
6144:k2nTJP5L5fta2yML2mdeYOftZI9J4QV7U5bIF1795f:k2nV/ft3hdxQtZI9JF2CF9f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2079ea0b66170d6f2ff428ff951020a8
Files
-
2079ea0b66170d6f2ff428ff951020a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 240KB - Virtual size: 721KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ