Static task
static1
Behavioral task
behavioral1
Sample
72d2cda8d06fb0a637d2ee8e184ebd4c.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72d2cda8d06fb0a637d2ee8e184ebd4c.exe
Resource
win10v2004-20231222-en
General
-
Target
72d2cda8d06fb0a637d2ee8e184ebd4c
-
Size
3.2MB
-
MD5
72d2cda8d06fb0a637d2ee8e184ebd4c
-
SHA1
14bfc1ae94dbb5556c69fce9d9bff2641ec53be7
-
SHA256
e8de8146169af5ce9602cd5166275c79d46fbfe0b940386310dd2bcf5560fc5a
-
SHA512
8f51a8da0aa0ecb3c46643ef0a8bd48d8c26f268ef5f4b15ece3cf50531b58f7bd109429306f1a0d7f9d16d4c473d0386e83ffa49c93c0080c67c8380b1d31a4
-
SSDEEP
49152:LdYdB9fthFA9eOU75nADnIIXvqpY2qyL8vKBhRYBXIlJBQamuiQVlkH1b8LUV:stvO+Vr2vqRL8iBzY6lTCVIlk8I
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72d2cda8d06fb0a637d2ee8e184ebd4c
Files
-
72d2cda8d06fb0a637d2ee8e184ebd4c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hlkh Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ffff Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rts Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.polet Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.asfsf Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eoeoe. Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ennan Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ