Static task
static1
Behavioral task
behavioral1
Sample
64daf8b8582edc1c69e1ed76edc164d7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64daf8b8582edc1c69e1ed76edc164d7.exe
Resource
win10v2004-20231215-en
General
-
Target
64daf8b8582edc1c69e1ed76edc164d7
-
Size
39KB
-
MD5
64daf8b8582edc1c69e1ed76edc164d7
-
SHA1
5d8af15c2bb7cfb040b3797e5a0595bbb9b2df4d
-
SHA256
eaf85c9dbcb130065d7b273a4c3cd50c9f2e1a8172f8bcb324add83e351cf7c4
-
SHA512
26e49bc58ee4151eb8b075d11e0f16a6c7d92d7652795b528234904d251be21840cc1900be4e2ce808acc43646925e09922b3c4a02b82366d08ffcc956a7b231
-
SSDEEP
384:osUokexEOJ+VRZbqmx/pVB6lD95xnDmlDro2VHVZXkuo9Vd0yyjd:Yre/J2bqgx/Yp5x+1Ho32yY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64daf8b8582edc1c69e1ed76edc164d7
Files
-
64daf8b8582edc1c69e1ed76edc164d7.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ