Static task
static1
Behavioral task
behavioral1
Sample
72da49c400485e96af403c4ec67a7b0a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
72da49c400485e96af403c4ec67a7b0a.exe
Resource
win10v2004-20231215-en
General
-
Target
72da49c400485e96af403c4ec67a7b0a
-
Size
68KB
-
MD5
72da49c400485e96af403c4ec67a7b0a
-
SHA1
66a684266cac7e5e3b132216ca68ee680f80af5e
-
SHA256
a6061bbc7fe413e7cf51ab99940d488c5c255d4b15b1d74e9964e2fb095baf42
-
SHA512
e6a4dd7f084457e205dbbbf3da2437941b32ae1ff6a1a153a76aa4659f97179e95e6f5df22c19252214cecfdd080002c5345d72e3f76439a838fc04fe065b8c7
-
SSDEEP
1536:xtq94K+lRkBu1OtHyoxLE0E51kaUEiA2AezLjd:VlROHyoxzg1FUCep
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72da49c400485e96af403c4ec67a7b0a
Files
-
72da49c400485e96af403c4ec67a7b0a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: - Virtual size: 192KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE