Static task
static1
Behavioral task
behavioral1
Sample
42ac629bb21ad62e6b8353f998edfe22.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42ac629bb21ad62e6b8353f998edfe22.exe
Resource
win10v2004-20231222-en
General
-
Target
42ac629bb21ad62e6b8353f998edfe22
-
Size
2.2MB
-
MD5
42ac629bb21ad62e6b8353f998edfe22
-
SHA1
b7543628e7e736ca9212bf71d7905611a42f5b96
-
SHA256
8dc8dfd2435aea44a1b270d72bc9ec09e4f8e1febc42ef246a367fdc73620f97
-
SHA512
b62a74066acbedf00e202bc5dddf4342bdc8ed359443a8a3fb7e66b00315d64573ec7d1a368d31eec1a9cf3a5f44e768359fbaddd2588628d5a2112056812746
-
SSDEEP
49152:0ZLpajOWwJfK8wDjO7m8SILAwan+xHqysyDBS4Id/NWppLd3NZEL5UMesa:0ZA4JfK8QjO7m8SILAwan+xKysyDBS4D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ac629bb21ad62e6b8353f998edfe22
Files
-
42ac629bb21ad62e6b8353f998edfe22.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 462KB - Virtual size: 462KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ