Static task
static1
Behavioral task
behavioral1
Sample
71339b6ed6e2c1fadb41dc6237afc814.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71339b6ed6e2c1fadb41dc6237afc814.exe
Resource
win10v2004-20231215-en
General
-
Target
71339b6ed6e2c1fadb41dc6237afc814
-
Size
11KB
-
MD5
71339b6ed6e2c1fadb41dc6237afc814
-
SHA1
658b6eb0a53d3c2c36eb9453545c73e25ab0cccc
-
SHA256
844189fc82f22a10453156713cbdb2cd85866fb562d9ffcefb3bcbe687ac325b
-
SHA512
115f44e880d211a6a8e8308c8bfb377d5253ced3182401bfebb38f5ad80958579b4df4957c866d09d32b5b4ba0ad2b3204c21e8f1f0032a82fee05ff6fea1c82
-
SSDEEP
192:cYyrbI2HlzVydg50Ch23jJw893jEH93jbmeC6:G/dVH5+JwA3Ad3Oe9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71339b6ed6e2c1fadb41dc6237afc814
Files
-
71339b6ed6e2c1fadb41dc6237afc814.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
FTdP Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
EdeA Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x��� Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EdVEdX Size: 46B - Virtual size: 46B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE