Static task
static1
Behavioral task
behavioral1
Sample
71ef9d256aaf06d0674614ce1ae1d24d.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71ef9d256aaf06d0674614ce1ae1d24d.exe
Resource
win10v2004-20231222-en
General
-
Target
71ef9d256aaf06d0674614ce1ae1d24d
-
Size
385KB
-
MD5
71ef9d256aaf06d0674614ce1ae1d24d
-
SHA1
f261752f875900d7741712499ccd5fea0d3a6470
-
SHA256
e31bd2c30e2cc24ed370104a90586b30125592e712278c24a53b50ac98df5e21
-
SHA512
afbd34843ead8654e3cfea9d2df01b28d6fb09834ea316ddd94f413ae9cc2fc8f4898ee871ef58146c0e18db4210fa70abfc9fc7d5689eeb222d335f95ce49a5
-
SSDEEP
12288:Bn/IM52SzrXf2h778ZW7g0a03QUGk/0YB:BQMYSzrX+h778ZWU0a03Qg/7B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71ef9d256aaf06d0674614ce1ae1d24d
Files
-
71ef9d256aaf06d0674614ce1ae1d24d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ