Static task
static1
Behavioral task
behavioral1
Sample
22a4fdbc38f4f18e7b896bad3f796eda.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
22a4fdbc38f4f18e7b896bad3f796eda.exe
Resource
win10v2004-20231215-en
General
-
Target
22a4fdbc38f4f18e7b896bad3f796eda
-
Size
62KB
-
MD5
22a4fdbc38f4f18e7b896bad3f796eda
-
SHA1
7859d6f35b29a7e69a21b4dc90757a9b15ea3382
-
SHA256
07a41f539edae4268b7254f6412366d2f0ea1b7539324f33b35a497d5dd4f43d
-
SHA512
5d4e158f0a4ffc4df8c1956f2da8e8c8e08c35c9e1fa7d78a5806f6721155f748827db1d7a0685dfbdefade0802d02a935dab4331d154e085e3b0fe2743ed2db
-
SSDEEP
1536:O5Z58u5En4LkVrR/xt4at/APyYrPPqR3iL:uZOnfR/xtXoPyCqR3iL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22a4fdbc38f4f18e7b896bad3f796eda
Files
-
22a4fdbc38f4f18e7b896bad3f796eda.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 662KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 182KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ