Static task
static1
Behavioral task
behavioral1
Sample
42d7167ecfb39441a7c44678ecc3fd41.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42d7167ecfb39441a7c44678ecc3fd41.exe
Resource
win10v2004-20231222-en
General
-
Target
42d7167ecfb39441a7c44678ecc3fd41
-
Size
249KB
-
MD5
42d7167ecfb39441a7c44678ecc3fd41
-
SHA1
b8d8a4747d1f321baf33feb7ec4e6a435907dcaa
-
SHA256
71f4fbe2021d9f47c7b0cd2feaad180fca92e4cb309cbc729da8c9777c41ea70
-
SHA512
d8de29a1a5795e5652fa8d56b3ba40758896eece7161c707b35b229c9bb7cd620a0bb8dcba554ae405af840052acf15956c45c3b9ad77ebddf6596dcb2091b8c
-
SSDEEP
3072:4Fz208xwSUKfZYng4Raoj7t41P8Oj1YgEfFnvO4r9Voq+ITe14em2nC/5e3XYI4H:4Fi9fKZDoPHKJH9V724prI4k5GeU11d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42d7167ecfb39441a7c44678ecc3fd41
Files
-
42d7167ecfb39441a7c44678ecc3fd41.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 724KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 248KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE