Static task
static1
Behavioral task
behavioral1
Sample
42164b0ca30a561f9ab97f90e725ae46.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42164b0ca30a561f9ab97f90e725ae46.exe
Resource
win10v2004-20231222-en
General
-
Target
42164b0ca30a561f9ab97f90e725ae46
-
Size
2.2MB
-
MD5
42164b0ca30a561f9ab97f90e725ae46
-
SHA1
b6093e519f76a23bbe20f5be13ebfcfe6beb1f6b
-
SHA256
7159ea59b1f3e6891c252f0cb60568fc458e1e6ba573c49cd0446bd9db54ed1f
-
SHA512
a6821282b7380bb61f2fbf4a8d6a5b1f00726a45ede7014f804bd9229fdab5ae4e03e911e260f76062f3773294e3dbd5b0914b1948042b3e9fc9d6167f03be8b
-
SSDEEP
49152:MsIRW+1hxbQaAf+dxtA4zgfNRNZZBz9LKX2+HJwU5Bz9pYpOjITe:hIDXLJ1hzEzBl9o2+pwQzPY4jae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42164b0ca30a561f9ab97f90e725ae46
Files
-
42164b0ca30a561f9ab97f90e725ae46.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.TTP Size: 2.1MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TTP Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TTP Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TTP Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TTP Size: 58KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE