Static task
static1
Behavioral task
behavioral1
Sample
458fecb3788e97f74458299b9d24aeae.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
458fecb3788e97f74458299b9d24aeae.exe
Resource
win10v2004-20231222-en
General
-
Target
458fecb3788e97f74458299b9d24aeae
-
Size
6.2MB
-
MD5
458fecb3788e97f74458299b9d24aeae
-
SHA1
64ff3fd4c608d19861bfd810b10485650dca3eaf
-
SHA256
0a1a6e82692f1264520d384ee9d849670c7fd59112e90233e054222a399e807a
-
SHA512
35339325fe3facea4b5bce363ad8b59c9150d8a5fac9a1378350bc43702eaa8c984ee51221d3346e60aa51311fb4ecf64062b09455d34043288c2fe712074d0a
-
SSDEEP
196608:7redsn9PtRBzBs9R8YfCceVYuUFUfPMuatZFxxEVSu2y8Wz5HcxQnQbxAPi9:edsnnXx0CXUFEPMuMZLxEVSut8WzhRQ9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 458fecb3788e97f74458299b9d24aeae
Files
-
458fecb3788e97f74458299b9d24aeae.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.hvfM Size: - Virtual size: 924KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.WQlZ Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE