Static task
static1
Behavioral task
behavioral1
Sample
72af16ce0e12f904f800844943a38c4f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72af16ce0e12f904f800844943a38c4f.exe
Resource
win10v2004-20231222-en
General
-
Target
72af16ce0e12f904f800844943a38c4f
-
Size
1000KB
-
MD5
72af16ce0e12f904f800844943a38c4f
-
SHA1
d060423c8168010040d2893703074fe6b28a3984
-
SHA256
deab2aab95000dfac3ff5a41387d38bf0f850f3ca6ece5ceee653aced2a62707
-
SHA512
152bedfea6106b41d3d6346b92bc0df5fbe43836931c391dcb44fb488ae992a682011d382c4d9d40608a11b27fa7e53ec97c4f29edf75976fc3db0868b426022
-
SSDEEP
24576:+Te3sogZs6h9hwZxALKIwXNJ7cODq1B+5vMiqt0gj2ed:qeMZs09hwHUCNJ7kqOL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72af16ce0e12f904f800844943a38c4f
Files
-
72af16ce0e12f904f800844943a38c4f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ