Static task
static1
Behavioral task
behavioral1
Sample
ced50aba8bfba6865d8e4dbc703a79b2.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ced50aba8bfba6865d8e4dbc703a79b2.exe
Resource
win10v2004-20231215-en
General
-
Target
ced50aba8bfba6865d8e4dbc703a79b2.exe
-
Size
58KB
-
MD5
ced50aba8bfba6865d8e4dbc703a79b2
-
SHA1
73f849938a50b09211e5ecdb18dceac7b82e5998
-
SHA256
2c87751f5c9729cd4519a5396ed708dea4383cf7b112dd3bf79eb82751fec816
-
SHA512
7e06c6e176b9811c758e56c200b5228142a580245ac15709709ed3622400b9f58dd0f5638da64fd07f325aa8910980e9089f82f6dd87cfe44196620bfe3012cf
-
SSDEEP
1536:Nd0FFbnGttJyClUooooooooooooooooooooooooooooooooAuookovoooooo2o1e:NMbrClUoooooooooooooooooooooooom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced50aba8bfba6865d8e4dbc703a79b2.exe
Files
-
ced50aba8bfba6865d8e4dbc703a79b2.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ