Static task
static1
Behavioral task
behavioral1
Sample
426d36858082f61fa11fbe0965982cb7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
426d36858082f61fa11fbe0965982cb7.exe
Resource
win10v2004-20231222-en
General
-
Target
426d36858082f61fa11fbe0965982cb7
-
Size
423KB
-
MD5
426d36858082f61fa11fbe0965982cb7
-
SHA1
37fe3ae4132beead09c9c10642ea959c386a26c4
-
SHA256
ff4744bebe027a309cb0d36a85eb166d352838c2728dca039abef0212ae36d8b
-
SHA512
892dc021a82ced978da3999897e9023fa779e109cead005cef4c4812d0d59dc230ccc79c7539bc1bb00ed40c27fb986bd6192f81fd3d7b0e47bc92c155fa4001
-
SSDEEP
12288:9VG8AOPEy/vMG25bKPUBgs3ojLSR8ik/sCbIZiIAfI:9VFAOPVnMG2RKPUBB40bZixfI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 426d36858082f61fa11fbe0965982cb7
Files
-
426d36858082f61fa11fbe0965982cb7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.icode Size: 909B - Virtual size: 752KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rtss Size: - Virtual size: 3.0MB
.adata Size: - Virtual size: 456KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 421KB - Virtual size: 424KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE