Static task
static1
Behavioral task
behavioral1
Sample
409395fed98305bee8f08cee6c3fa160.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
409395fed98305bee8f08cee6c3fa160.exe
Resource
win10v2004-20231215-en
General
-
Target
409395fed98305bee8f08cee6c3fa160
-
Size
29KB
-
MD5
409395fed98305bee8f08cee6c3fa160
-
SHA1
05b3a1d92347c27fca45db7368af440df8cb646a
-
SHA256
fc4c5f461dad06c74979f9d41e04c042b4443f0855acaef156aee7bdfb6327e8
-
SHA512
b9fdbbc34177f37e9c9cdb41023034bec794316718bfa90e80dcfb7193a9bea5c64ef2144cdc4b7d2815cecc3112edae928646a9bf329eeae30ff468df564147
-
SSDEEP
768:b2Z8J/Up7D6cgl0oArRNOnXukOsZpzsV41Wi:b2Z6/k+cw0oJnrdz4V4F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 409395fed98305bee8f08cee6c3fa160
Files
-
409395fed98305bee8f08cee6c3fa160.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE