Static task
static1
Behavioral task
behavioral1
Sample
71cd5844a7747c49bdc32c3a23ee3996.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
71cd5844a7747c49bdc32c3a23ee3996.exe
Resource
win10v2004-20231215-en
General
-
Target
71cd5844a7747c49bdc32c3a23ee3996
-
Size
70KB
-
MD5
71cd5844a7747c49bdc32c3a23ee3996
-
SHA1
0a9dbe8a9de9ca7256f4e175211bd7dbff658ddc
-
SHA256
e2a0aa017be1085dca2a3698f123d200d5c8089bee3fefc1a29456a1d41f47f2
-
SHA512
1eca1f208cd2bd32a55b9f51108c16633675e148b21c5f287a3a744e989ad169dcd299f440eb97b92c492f7eb3c7cd134390539a7bc7561797749c6d9af6a66c
-
SSDEEP
1536:eO+I6Qwjmkk2e3Kol4VP7uSOqd20PGxFKzf170Q:5CM3KomVPSLO20O/Kzf2Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71cd5844a7747c49bdc32c3a23ee3996
Files
-
71cd5844a7747c49bdc32c3a23ee3996.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ