Static task
static1
Behavioral task
behavioral1
Sample
426027229708e2ba5368bdc9eb6154b8.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
426027229708e2ba5368bdc9eb6154b8.exe
Resource
win10v2004-20231215-en
General
-
Target
426027229708e2ba5368bdc9eb6154b8
-
Size
6KB
-
MD5
426027229708e2ba5368bdc9eb6154b8
-
SHA1
5ee1b42b821fdeaff5cf62749318108d87b3aa2b
-
SHA256
cf7ebcfdb95ddf1ccac681120a7165c9fb36a0649e75f520b887591275e9eb2e
-
SHA512
26fd00c5f4b9e44ddf267e76949cb7a9476488522b5bbaf9b9f06069c2099e394c1df5f81846cdd04842e7ff36db366b8a79c060966857c4f0f077f3dde46460
-
SSDEEP
192:EIYS4KzJWQaVbkyZ8KHtlPSxUhS1NHSgDSDAnho:FY8vaVbdf3S2gODIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426027229708e2ba5368bdc9eb6154b8
Files
-
426027229708e2ba5368bdc9eb6154b8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.kqhtxcz Size: 1KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itxulci Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data39 Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE