Static task
static1
Behavioral task
behavioral1
Sample
Q072P8EXRBGUNFZKO9HVSA5W_W8UD6YBVJ0.exe
Resource
win10v2004-20231215-en
General
-
Target
Q072P8EXRBGUNFZKO9HVSA5W_W8UD6YBVJ0.exe
-
Size
5.6MB
-
MD5
04c23ac1c1bad602643e85ddbd8a245f
-
SHA1
755c2fad32910a5645c995cdc921fc4090f464f2
-
SHA256
7a62d75880ce663b80d48fbca01690e09a784e1dc4a5d3a22f6d1531bd45ccf1
-
SHA512
7ab821321bd0177eeed5e4e8cf710dec4cdd860499691d55c5427b8c1abb99bd7dd95074e422ede625ad5adefd298ef4eb43003c7b8cd156216b2e3400fefce7
-
SSDEEP
49152:Sxff4F5Nlx7haFd1kmR3DQo0cED/NXdY0MsGWVFJLFJZSfkyFYjV:effWp7haFdyAMozEpXdY0MlWXJZHpjV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Q072P8EXRBGUNFZKO9HVSA5W_W8UD6YBVJ0.exe
Files
-
Q072P8EXRBGUNFZKO9HVSA5W_W8UD6YBVJ0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 403KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ