Static task
static1
Behavioral task
behavioral1
Sample
10420bb38961599ef870bc7b7a3559f8.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
10420bb38961599ef870bc7b7a3559f8.exe
Resource
win10v2004-20231215-en
General
-
Target
10420bb38961599ef870bc7b7a3559f8
-
Size
99KB
-
MD5
10420bb38961599ef870bc7b7a3559f8
-
SHA1
4b150750273e18860aff255f341485e868a93f02
-
SHA256
366b56d3efdb730db25b8c75128ffad80fe8c33c5a00c7aed6a5f8c993c51ceb
-
SHA512
07cb6c6fded20b991312fabd570247ac3c64acf8e5a6ba1214c04602e6119ab9228e020f6b8e93aa95df370790177d92cc94ee66b2a777c3de6d28f580d67549
-
SSDEEP
3072:zy7XGFoNRnWr4/GLUxkFofEsrqNnvTh3Oq:zsbNor4eXofdMnv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10420bb38961599ef870bc7b7a3559f8
Files
-
10420bb38961599ef870bc7b7a3559f8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
2 Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sa Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ranhgt2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE