Static task
static1
Behavioral task
behavioral1
Sample
286752ee34294542e25eb3782078655f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
286752ee34294542e25eb3782078655f.exe
Resource
win10v2004-20231215-en
General
-
Target
286752ee34294542e25eb3782078655f
-
Size
59KB
-
MD5
286752ee34294542e25eb3782078655f
-
SHA1
b1b7b810e741904f6354052ee579ff3087f76d72
-
SHA256
d24aa994d742482731b88dd0b45e471ce6aa079aa97633f3e527e6f5fe089d61
-
SHA512
63d75a400a1b1922a0bdd505707d04e6f5f25ec7017dc7c481fcb519c2b4190d49888c19c9b0ad45249112a58157f5a5543bd48c249df31550a1769b9afbb695
-
SSDEEP
768:5ivxqfQhMJjlRuwkZnnrX3cuucdxSha5vkbv7OpOUXX7RiNr03lzN3lekw:AvxqfQl3pnbMuuLm2vycUn4NrYlBskw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 286752ee34294542e25eb3782078655f
Files
-
286752ee34294542e25eb3782078655f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 41KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ