Static task
static1
Behavioral task
behavioral1
Sample
64f481bf6c7305c3a595a9012c317f21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
64f481bf6c7305c3a595a9012c317f21.exe
Resource
win10v2004-20231215-en
General
-
Target
64f481bf6c7305c3a595a9012c317f21
-
Size
2.6MB
-
MD5
64f481bf6c7305c3a595a9012c317f21
-
SHA1
f14be6ca1bccdcdb3f6884ff9fa01faa7a046ddc
-
SHA256
a12a10e5d17f03b71483f0661ddbcf6608f079f635f0caf7eda7ce521f055dc6
-
SHA512
1f67aba11ba62fbe21d24ed0ee1d7fd8652dc6a3ed8416cd48692ccc9aa865c93be1e9d685a628e94859481d8869f5a2fecabb5fc41db5fe0377d7429296e3ee
-
SSDEEP
49152:mnBhyT8VOaYJpl6tWHespzAnngNHB78G4kqpP3ALWkSNo01PwvkqyacpvBPombj6:mQ8AaYJpl6tW+s8A6G4kqF3KWhNoGP0n
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64f481bf6c7305c3a595a9012c317f21
Files
-
64f481bf6c7305c3a595a9012c317f21.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE