Static task
static1
Behavioral task
behavioral1
Sample
456e3c95824e71fa825d7d4d76ca71cb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
456e3c95824e71fa825d7d4d76ca71cb.exe
Resource
win10v2004-20231215-en
General
-
Target
456e3c95824e71fa825d7d4d76ca71cb
-
Size
688KB
-
MD5
456e3c95824e71fa825d7d4d76ca71cb
-
SHA1
bb685a0c96f1ecd7aeeca69830fc58ee0c7313f6
-
SHA256
01dfb2e185b3f8f5e766634274a5a45e17abad24b47ec90d04f5a98179d8f56c
-
SHA512
4c8a3f845ea9271240d859338f8234eaac595e54405caef4bfef277e1c7b9187eb6075c71889c401183b86403d229d3303483962fc8a36cd6d4eda8b1324e421
-
SSDEEP
12288:go2VOCmcf8yd/zk2YobxhFBoUKKzDNBretZHbSfYA06UiG+0C76Jaq8:jwkMvFGUlXNBrG92rnUHC2C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 456e3c95824e71fa825d7d4d76ca71cb
Files
-
456e3c95824e71fa825d7d4d76ca71cb.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 472KB - Virtual size: 471KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ