Static task
static1
Behavioral task
behavioral1
Sample
418872b74aa58192c92e6477a0009452.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
418872b74aa58192c92e6477a0009452.exe
Resource
win10v2004-20231215-en
General
-
Target
418872b74aa58192c92e6477a0009452
-
Size
1000KB
-
MD5
418872b74aa58192c92e6477a0009452
-
SHA1
de622204c75fa95ebbd4ae7060d141e9864940e3
-
SHA256
831fca3fdf8a1b0cc5e26dfac827d9ee75357e55a35b5c13ecafe31905d99967
-
SHA512
3c927556a01be2389dcb63a707f602356f5ebe8512fae3530a0f5db36af6104ddb0c72dfb562d87aca545ec60de50149b887891ea38625882d40cce44747d506
-
SSDEEP
24576:etoTFYUcP3e+CwZW5UceN4y+tAD1B+5vMiqt0gj2ed:etYYve1iW58NHrqOL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 418872b74aa58192c92e6477a0009452
Files
-
418872b74aa58192c92e6477a0009452.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ