Static task
static1
Behavioral task
behavioral1
Sample
434f37ee6d70dc5c87aac37181534d81.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
434f37ee6d70dc5c87aac37181534d81.exe
Resource
win10v2004-20231222-en
General
-
Target
434f37ee6d70dc5c87aac37181534d81
-
Size
376KB
-
MD5
434f37ee6d70dc5c87aac37181534d81
-
SHA1
534f6736c7b4cbebc26417e9f51527bac49ffa9d
-
SHA256
16ebe1eda3a2a91a01f4e9ae5fab91c187ea20e6ae15f38427f1ddf6c7cef84e
-
SHA512
79791dfae6d0b82403dd70a28c1c89c42814c3371d7656a7584766b1f3c35e666e5f1c973be64ec0d26657860d62bcda7741e0cba8cf40fca172c967e43bf8cf
-
SSDEEP
6144:MgJaFQ9yyAGHHZj5JTF2idZecnl20lHRxp3g8V4U+v3yP19Y95rlPCs4VkA8xV9j:huQ9RTHHZ/RF3Z4mxxPVmOzYrlPKvMjZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 434f37ee6d70dc5c87aac37181534d81
Files
-
434f37ee6d70dc5c87aac37181534d81.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 60KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE