Static task
static1
Behavioral task
behavioral1
Sample
2379c0080d8def684c094ccf5cb0e649.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2379c0080d8def684c094ccf5cb0e649.exe
Resource
win10v2004-20231215-en
General
-
Target
2379c0080d8def684c094ccf5cb0e649
-
Size
75KB
-
MD5
2379c0080d8def684c094ccf5cb0e649
-
SHA1
f825744d9278396416a3b4b267d5a0826ce6107e
-
SHA256
0a244f576e7241de6d3145eda0e94375be7919479826316ca0943a71e9e9e371
-
SHA512
a1594f0825d9e3232fbe7e2cb588db22259d7c51ef74a3f68fb0984b4704ea15ce0fa3bb4a3d0611a6b8ebd0d72d121fb8c865f43b6fdcb694e7a8421c008d76
-
SSDEEP
1536:9OY499DAG7T7P8e6sL+AmWzNzRPOWLK6AoTtBaBCO8lrJYCRLC:954Dn7vv62mWRzgcAoTtBzRrYCRLC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2379c0080d8def684c094ccf5cb0e649
Files
-
2379c0080d8def684c094ccf5cb0e649.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.misswe Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.misswe Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.misswe Size: 15KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE