Static task
static1
Behavioral task
behavioral1
Sample
72e477eebf12ebc398dd89d4a686fe11.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72e477eebf12ebc398dd89d4a686fe11.exe
Resource
win10v2004-20231215-en
General
-
Target
72e477eebf12ebc398dd89d4a686fe11
-
Size
359KB
-
MD5
72e477eebf12ebc398dd89d4a686fe11
-
SHA1
f4a1ae58d70ac6ff69023fededaf23e5d66ce6d7
-
SHA256
394a25508e3f49485c64d8e3d63a8131c170c91b278d61ac8e6057c29b084fd4
-
SHA512
4404ed3c8e036a4a720ce2a5690252956e06b45821f02d29c1d84068d7c72cde7ab5dcf72fbc1dcc7a6d4c740da14ef61c68244ee37f4232ec1214a67ff6d9bf
-
SSDEEP
6144:WizJVFcObrxqph4s8stCzhiv4tiWY80FvrlTsZOjkaPa6SogMlAq4SYral:NJ/cObrApys7BhH80aOj1a6SozAq4Xrw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72e477eebf12ebc398dd89d4a686fe11
Files
-
72e477eebf12ebc398dd89d4a686fe11.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ