Static task
static1
Behavioral task
behavioral1
Sample
26cf035273b3aaa2a9e78b32e5c9ea64.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
26cf035273b3aaa2a9e78b32e5c9ea64.exe
Resource
win10v2004-20231215-en
General
-
Target
26cf035273b3aaa2a9e78b32e5c9ea64
-
Size
250KB
-
MD5
26cf035273b3aaa2a9e78b32e5c9ea64
-
SHA1
a740eb97cdb5a1435e45f128a334a2891eff8a3e
-
SHA256
5e49827bff08af5afeb35ae237f893c2e81f7b07e27b6bd71709ad9aa7f6f861
-
SHA512
3212a7eb775223fc7b818a0e4aa185426cec5aa7b95d7c5e55df52824f4db8acdb4c4f4c16f5f45f75a5166a39fba6e8f8e861a2c65a969a5beb9308b16e4510
-
SSDEEP
6144:7bISouqREuIhO5msIWeWXGNLtzwlIXTsZ1+5QbQfvi:PgPuuqOAsIW7eaALq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26cf035273b3aaa2a9e78b32e5c9ea64
Files
-
26cf035273b3aaa2a9e78b32e5c9ea64.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 10KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ