Static task
static1
Behavioral task
behavioral1
Sample
20e5d17957ad61ee58d52f2f7da2740e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
20e5d17957ad61ee58d52f2f7da2740e.exe
Resource
win10v2004-20231215-en
General
-
Target
20e5d17957ad61ee58d52f2f7da2740e
-
Size
32KB
-
MD5
20e5d17957ad61ee58d52f2f7da2740e
-
SHA1
8a596b2e0b552b9a1c84146df74d8c2365ceb88f
-
SHA256
d58417883336443af967bea7d3b502ccc105f224b3104b13ae69f07254318bee
-
SHA512
fc5d066a54b30ca9aa9f4d073486a0bd3c8cd61ced6fe0f68a852afae314eb40bdb36408bc1ddd4fb70b00bc844789bb045f658a212538703a791e1a6a16fef2
-
SSDEEP
768:40TZFGc+VwVpP00tnX/cZrCFfI+tHzHqJ4NtLEA2k7i+wErBl:LTZFGcpP00tnPQWNRrRTLEHk7i+prL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 20e5d17957ad61ee58d52f2f7da2740e
Files
-
20e5d17957ad61ee58d52f2f7da2740e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
��ږ[ Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
~��G Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3���GA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I����� Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE