Static task
static1
Behavioral task
behavioral1
Sample
70e931d753edeb002602462609de1744.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
70e931d753edeb002602462609de1744.exe
Resource
win10v2004-20231222-en
General
-
Target
70e931d753edeb002602462609de1744
-
Size
45KB
-
MD5
70e931d753edeb002602462609de1744
-
SHA1
8ea537dabd6855fd8585fe69d21e1f3d6d39d01c
-
SHA256
7bc2b4ad5708a0a76db189665a3775df37df6980a0e663203da8752be931b383
-
SHA512
535e574975696e8a56b5cd96ca3fd2b32973f0278f0047dba3546173c44c72f7093acde7db8fc7c9a16903c8d4a9cb17260feb8df1d687b6e3daac5ab757d8c3
-
SSDEEP
768:ERkuERgXImQNy2IIKfKbQh4MikhHEwTyNrJYpqpmLrYOYtDNnweBxl2e+i4w+:rhRg4i7CmnhHErNVjm4ZB5xl2e+D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 70e931d753edeb002602462609de1744
Files
-
70e931d753edeb002602462609de1744.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 33KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
beey.sys Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PEPACK!! Size: 2KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE