Static task
static1
Behavioral task
behavioral1
Sample
26864f17f5e1098f430ce9a7eedebdce.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
26864f17f5e1098f430ce9a7eedebdce.exe
Resource
win10v2004-20231215-en
General
-
Target
26864f17f5e1098f430ce9a7eedebdce
-
Size
262KB
-
MD5
26864f17f5e1098f430ce9a7eedebdce
-
SHA1
195a2ab41c4469148c4007bd6f866793fcd0ed37
-
SHA256
1b43ced2b7a061c5e6cbe747634b02f90054b3d4c5b53a52f4ded52dab8933f3
-
SHA512
cd5fafc61be3ef60147faeb0ddfd826008c14688edca52664c1bce74557d87255605d1f232c2f98aceb8f3c717aedf95e8055f8c4622786f3eecf62514d1196b
-
SSDEEP
6144:7GyabEhw85p3R1N24rRehgeVgMkJAAQu6TDfztz+BBMXZpJFgYZHd:SyAEi8zxMHn2AdHTTBz+BqVFp1d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26864f17f5e1098f430ce9a7eedebdce
Files
-
26864f17f5e1098f430ce9a7eedebdce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
WinLice0 Size: - Virtual size: 760KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WinLice1 Size: 261KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 241B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ