Static task
static1
Behavioral task
behavioral1
Sample
64935defdbd693b4cb391c323fe20878.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64935defdbd693b4cb391c323fe20878.exe
Resource
win10v2004-20231215-en
General
-
Target
64935defdbd693b4cb391c323fe20878
-
Size
9KB
-
MD5
64935defdbd693b4cb391c323fe20878
-
SHA1
78cb0f36e092ca294ee185849ee73f7a9df04248
-
SHA256
ec4b245429ccca841a163821139c3deef6d8eae360bd1fb54aa10b42c71d6928
-
SHA512
4c6eb6204c8432fa95be7dce64fcf039941dc14ffafbf2a43b929615b92e4bbecfaedc59eb649e309e79feb83c9641ee7aaefdf49a5e208aae8f779501fd09e5
-
SSDEEP
192:rI4jyJyIobR0crkr/nnN8v5YK06entPpdSTHXlqN+fF1WpX4WmH:Eagy5bWXr/nmNGtSTHXlqN+fq4TH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64935defdbd693b4cb391c323fe20878
Files
-
64935defdbd693b4cb391c323fe20878.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.rsrc Size: 6KB - Virtual size: 32KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE