Static task
static1
Behavioral task
behavioral1
Sample
468e011d23d893688f8f03095fac023b.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
468e011d23d893688f8f03095fac023b.exe
Resource
win10v2004-20231215-en
General
-
Target
468e011d23d893688f8f03095fac023b
-
Size
385KB
-
MD5
468e011d23d893688f8f03095fac023b
-
SHA1
e8515563e1811bfe82b1e5d48642253407e19822
-
SHA256
7a470a1330b7419cbb91fdc1133cd93a4fd8d46d42d176847b883937b3e393e6
-
SHA512
e00a341a8daf789f7d9adca5dc6dfada4bd83c3bb5ff103238282319d218946706cec4b799c42ed8f32d2b6d5054b615f64b1b5e2b2539170574c427b7098cdf
-
SSDEEP
6144:g1mfd72NLuJO/9jqiYE5xOj2NTTI4ljbNODXTPrNVCMKMZSZ9imLB:g+d7hJO/FqiYEDYWHN4VCnRimLB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 468e011d23d893688f8f03095fac023b
Files
-
468e011d23d893688f8f03095fac023b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ