Static task
static1
Behavioral task
behavioral1
Sample
2279c7d01b3f8876e5d4f4c941f77979.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2279c7d01b3f8876e5d4f4c941f77979.exe
Resource
win10v2004-20231215-en
General
-
Target
2279c7d01b3f8876e5d4f4c941f77979
-
Size
45KB
-
MD5
2279c7d01b3f8876e5d4f4c941f77979
-
SHA1
5f30aba92cb3c9d0ebeb1eea58da6999ee3176d6
-
SHA256
39b42a11a6b140470d1ed7a2e44f3b478d6fb51993ae0a4f549bc00ecc98144e
-
SHA512
b5223fdb62c6ef8ee8ef840c0c8ff3a77b12e0284d9e1b8ee3b738a48f8babf6461f4ac6484e9d3126515e4309baee078d4808782a378a5e28530586c768474c
-
SSDEEP
768:E1AuwHyeFo6NPIFAoslbf8eRYLGXdoIFbb5omuKWcbsvwnoT9D88888888888JXw:EOxyeFo6NPCAosxYyXdF5oy3VoKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2279c7d01b3f8876e5d4f4c941f77979
Files
-
2279c7d01b3f8876e5d4f4c941f77979.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 26KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raven Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE