Static task
static1
Behavioral task
behavioral1
Sample
d5deaac3505e9a7f76f14598f800ab78.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
d5deaac3505e9a7f76f14598f800ab78.exe
Resource
win10v2004-20231215-en
General
-
Target
d5deaac3505e9a7f76f14598f800ab78.exe
-
Size
63KB
-
MD5
d5deaac3505e9a7f76f14598f800ab78
-
SHA1
21593f650a5d9721224db5c3e581299f5e425b66
-
SHA256
9e64d46413c67fb71d365c6fa85f3eb9ed7b7cb2dfe4d02806a7a64f49909aa5
-
SHA512
3cdb6d40d98be8c359f8f33bbc12c3a35d17731620e30c844a01f23870fc9c9d5001a7d26d93ca929309fd12bc941a1df7beaa4004685d25c7069657185a44ba
-
SSDEEP
768:80SP6oVtDNmzgjYCgPL2pMSGaSJWHeLgPyWX/1H5oVEWmrUTvn93b7NRDMFME3e6:86oVtgzgjYCKq2SCJDg7p+VKEn9rjDHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d5deaac3505e9a7f76f14598f800ab78.exe
Files
-
d5deaac3505e9a7f76f14598f800ab78.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ