Static task
static1
Behavioral task
behavioral1
Sample
42a4fd2bec69cde9dad9ebc6d1fa805b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42a4fd2bec69cde9dad9ebc6d1fa805b.exe
Resource
win10v2004-20231215-en
General
-
Target
42a4fd2bec69cde9dad9ebc6d1fa805b
-
Size
177KB
-
MD5
42a4fd2bec69cde9dad9ebc6d1fa805b
-
SHA1
9a0355ae414474535424055940da9004d1205753
-
SHA256
80ca7b4c7022e3254777a5fb8431657515915355d41f64e734aa7195f27690c7
-
SHA512
319d1eac1d8f7d1c5e8df53fe7fb6deeeebddb6e345ef80fd0dcc3f888c1942f452649b0d717ba01e4edbaa9066de9de7d1a02c92ceedbc7f200a0469e11a826
-
SSDEEP
3072:JfSQM0TO6kdhFwBd/5VrM2Fpm72Sd8hzziVgRtS6rJky+T6oCtDWJ0OGvO1IMWoS:NSQjkFwBd/o2rmKYOOVgRtPrt+aWJQIq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a4fd2bec69cde9dad9ebc6d1fa805b
Files
-
42a4fd2bec69cde9dad9ebc6d1fa805b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: - Virtual size: 348KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 175KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE