Static task
static1
Behavioral task
behavioral1
Sample
64d7c5724c5b0d9141e08dce820a1a1f.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
64d7c5724c5b0d9141e08dce820a1a1f.exe
Resource
win10v2004-20231215-en
General
-
Target
64d7c5724c5b0d9141e08dce820a1a1f
-
Size
116KB
-
MD5
64d7c5724c5b0d9141e08dce820a1a1f
-
SHA1
0aac2a67b5d00655e1eba37272050789c0265754
-
SHA256
444467dbee00de53e0e6f99fefc7e8745be8ecff0853c889bd695eabd16ce785
-
SHA512
2072c1b2d480a7f0f06495d3f93735ce228b1d58ed2c96bd55bda3009c0a5d8db5f3c1662674878671867af2aad30e1f79957606d0eebcc5354e8329db12fa73
-
SSDEEP
1536:Fq9r8KtuQdQOgrzgbWZosNdddBwSoNsA7HTi8UNdo0Y1y9V9N:FGBdQzrzgbZsNddjwSoVHGTdugl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64d7c5724c5b0d9141e08dce820a1a1f
Files
-
64d7c5724c5b0d9141e08dce820a1a1f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ