Static task
static1
Behavioral task
behavioral1
Sample
72b1cb309f2def56fbf82f9757d7a0cd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72b1cb309f2def56fbf82f9757d7a0cd.exe
Resource
win10v2004-20231215-en
General
-
Target
72b1cb309f2def56fbf82f9757d7a0cd
-
Size
6.1MB
-
MD5
72b1cb309f2def56fbf82f9757d7a0cd
-
SHA1
e995867ea82014ae4eb82219838770dd6102ef7e
-
SHA256
4922cbb150b7125ddb39ecdacf553695f62a71e2fcd7dde97fa5e74b9d7c5322
-
SHA512
bddef24f33c5243a4dfd0fcbe086794f509abef27fd3afd951fca6c7f460d3383872869686ae9ea80a280c0d4157f6b3d32f5c55bd814041b773dd276d80aa20
-
SSDEEP
196608:dIjAk8KWDOX8Y5mrBLu5I33bK5aVSI2yY:dIjl8KWDU8VBLEKbK5af
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72b1cb309f2def56fbf82f9757d7a0cd
Files
-
72b1cb309f2def56fbf82f9757d7a0cd.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.iltL Size: - Virtual size: 924KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MnLQ Size: 6.1MB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE