Static task
static1
Behavioral task
behavioral1
Sample
64e1a4abbefc7ba7e80f5be21acd0ce5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64e1a4abbefc7ba7e80f5be21acd0ce5.exe
Resource
win10v2004-20231222-en
General
-
Target
64e1a4abbefc7ba7e80f5be21acd0ce5
-
Size
108KB
-
MD5
64e1a4abbefc7ba7e80f5be21acd0ce5
-
SHA1
e39670ddabb83b313517aa29e4ca993e7f2472d4
-
SHA256
fd8bc6c0d3fc559ca70ce3a67ae7945d5ad67fb323054e6af08ea5996d8bc760
-
SHA512
a631873ef41574b82600ba530a47756745fd10cc926bacd8fc13e0b2a473f48bebafc07a4cc80b8db0008c1fc26a1704d825e6f4a1ea61463f82d6d596f0e1b5
-
SSDEEP
1536:ICn5hieAHSin69jwaDqr40rD1UJYICmom5Oe2dOc4deCwcZ6SKS:aN6puD1UyIxgeTOfZSK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64e1a4abbefc7ba7e80f5be21acd0ce5
Files
-
64e1a4abbefc7ba7e80f5be21acd0ce5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 663B - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE