Static task
static1
Behavioral task
behavioral1
Sample
64af35dc9f2e3d61ebfc53d258b883b4.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64af35dc9f2e3d61ebfc53d258b883b4.exe
Resource
win10v2004-20231222-en
General
-
Target
64af35dc9f2e3d61ebfc53d258b883b4
-
Size
189KB
-
MD5
64af35dc9f2e3d61ebfc53d258b883b4
-
SHA1
7fe072c9732063a3e20929e42c31454c75ee7696
-
SHA256
f729b27cfe06afb06623f2c87aa6518bc5aff64c67c746d26a2dfc7455298d15
-
SHA512
f09cc4b43e5934d4a19692250a6cd5b5c9cd3dcf6392660a2574d8af93e732dc433807cf7361b093d39e1a20e9c99284a721623534b7594d6e52bf5216e44711
-
SSDEEP
3072:FKXlvvOqeCH1qX5qLEJCaeM4G3m/cout/:KleqeCVC5qJaJ3ecoS/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64af35dc9f2e3d61ebfc53d258b883b4
Files
-
64af35dc9f2e3d61ebfc53d258b883b4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 156KB - Virtual size: 156KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE