Static task
static1
Behavioral task
behavioral1
Sample
640cfede4914da6cfd938b3468195ace.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
640cfede4914da6cfd938b3468195ace.exe
Resource
win10v2004-20231215-en
General
-
Target
640cfede4914da6cfd938b3468195ace
-
Size
766KB
-
MD5
640cfede4914da6cfd938b3468195ace
-
SHA1
e6d44c5986c0abf5de9d8f66644e0a7ed663a72f
-
SHA256
577b5458d240f5c81601b749f591d445097dcacf1afc2e1100468ef6638d0162
-
SHA512
a726b079229f2fa4292530a155ed1f16cb809d1bc68edbd49877bd2d70fb9b9c4b1063fdf19bcfb10d6d0c108f421992be02e29fd9cd0a43137a1b4e3e3a14db
-
SSDEEP
12288:u0Il1+G6/e0eMUm/pLu69iKw9ugBN5OnSAK4qrYJQZmYJLTL/Ff0KY5np:u0IAe0eMXNXsHpqnSl4qMJQZmYt98znp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 640cfede4914da6cfd938b3468195ace
Files
-
640cfede4914da6cfd938b3468195ace.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 644KB - Virtual size: 644KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE