Static task
static1
Behavioral task
behavioral1
Sample
72172d5260fe9e82c5fd7115494f916c.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72172d5260fe9e82c5fd7115494f916c.exe
Resource
win10v2004-20231222-en
General
-
Target
72172d5260fe9e82c5fd7115494f916c
-
Size
1.0MB
-
MD5
72172d5260fe9e82c5fd7115494f916c
-
SHA1
d01d2076fea35508e7e6efaf23d3ea2e6ffb18ed
-
SHA256
2f97e12549b74e621c0b9533210e820f04ea964dc810460e4dbe480aa9cffa6e
-
SHA512
2dc5812c72cd8bca287c8df5d55b582a5adc4e8cda2e12e5fadea9728f2a1da1f46a88c582ac7251ac573eeffd292bb60313876c30aaeef8da68a4d8cdf98f2c
-
SSDEEP
24576:Ew99wyvsLZ7JokI3PhWTaS0YGuQ71q/mXCtS7lm7GGrrJji2pgA:H9wymJ2wp0HuQ71NytW+Jn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72172d5260fe9e82c5fd7115494f916c
Files
-
72172d5260fe9e82c5fd7115494f916c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 5KB - Virtual size: 736KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ