Static task
static1
Behavioral task
behavioral1
Sample
42ea5dd9d2d05c7d651578fcb3f6c2cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
42ea5dd9d2d05c7d651578fcb3f6c2cb.exe
Resource
win10v2004-20231215-en
General
-
Target
42ea5dd9d2d05c7d651578fcb3f6c2cb
-
Size
5KB
-
MD5
42ea5dd9d2d05c7d651578fcb3f6c2cb
-
SHA1
0e8a83c715b3d72e1caf4ef94474f37e7bdb9bde
-
SHA256
e390eb8d4837038607c75e6487e882acc42368680af3ce901afddaf22bd822b3
-
SHA512
07e1291c861a74ccb530a6c9ef44f04460aba93bf7587b719ba6060e5df2ac9a373dfbd9757ea661d5273d0ac5f5474c55bba2a5d93badf705cc4a61cf62ab76
-
SSDEEP
96:fnY8VzJswNy9NhEXkMA+Ka/EUZRLtTl6OLtUnz3e63AZvU5IV36:vY8VziH9EUh+bZvVSnCrZU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42ea5dd9d2d05c7d651578fcb3f6c2cb
Files
-
42ea5dd9d2d05c7d651578fcb3f6c2cb.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 283KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 127KB - Virtual size: 127KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ