Static task
static1
Behavioral task
behavioral1
Sample
117873a7d45c658004079d8e995ff964.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
117873a7d45c658004079d8e995ff964.exe
Resource
win10v2004-20231215-en
General
-
Target
117873a7d45c658004079d8e995ff964
-
Size
91KB
-
MD5
117873a7d45c658004079d8e995ff964
-
SHA1
489308f7ad279be476e5fdef38cf07b33bbca3f5
-
SHA256
cf63689505befc1ed517b0d8f458ef24b6425c9b730567451f772bcfe65e1b76
-
SHA512
a34fbc3420f2e1b8a10bf5ef0bbe4d553da8e0111a863f66eee89b0b3b739728ee9cf2c12ddf68bbd8533aec380b5f9a2e38da3a137711b786f53cafc40a44d9
-
SSDEEP
1536:ei7LZmVNIJtUnBAFm2LIP7ZKAqhuhfVrl2hGlkw1+X3yB9Pof5yq1JBKomag:nQVqTUnYsP7oby2h/GaE2Dfm3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 117873a7d45c658004079d8e995ff964
Files
-
117873a7d45c658004079d8e995ff964.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
fly Size: 619B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yC Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE