Static task
static1
Behavioral task
behavioral1
Sample
42e79eda2771aaba89a1b4a328188d57.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42e79eda2771aaba89a1b4a328188d57.exe
Resource
win10v2004-20231215-en
General
-
Target
42e79eda2771aaba89a1b4a328188d57
-
Size
123KB
-
MD5
42e79eda2771aaba89a1b4a328188d57
-
SHA1
6d3c95258bd3de3e66fea1cf224034aeadbee699
-
SHA256
7155799012fe50bcd90182cc6cb38475b6898f9f86b48e035d9149c1e13c4540
-
SHA512
522034efca17aa329aa5e98cbfab56e8bfb08ee8442d17edd1252deff0fe02231549302c5260744379cf1bdd9f56c4d2535e057aef29f30e9e89649688e0a2d0
-
SSDEEP
768:bYGRF88Mm4pD7Y2/rMRlmFu7lSRK9K2mEao83odoKcdZjP1KZw3QWpmIO+KNy:Eg9MmmI2gRlXK2mEAwncd1Eax0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42e79eda2771aaba89a1b4a328188d57
Files
-
42e79eda2771aaba89a1b4a328188d57.exe windows:4 windows x86 arch:x86
91323fbf2b892052c0f5f22da49d9680
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FatalExit
FatalExit
FatalExit
FatalExit
Sections
YADO Size: 7KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YADO Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
krypton Size: 109KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE