Static task
static1
Behavioral task
behavioral1
Sample
75af04d8fb78b273ecc61bef289f00a1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
75af04d8fb78b273ecc61bef289f00a1.exe
Resource
win10v2004-20231215-en
General
-
Target
75af04d8fb78b273ecc61bef289f00a1
-
Size
1.9MB
-
MD5
75af04d8fb78b273ecc61bef289f00a1
-
SHA1
f829c2465b4be7ad09b1f977eb65786b5886fe58
-
SHA256
4acbfded17e2d4e42eb6c2a52812770f839ea33519b96f0bd3dad20bf94b5cf4
-
SHA512
2b9a4867d49b24ad49527616929872a372b7d238bebfe7d2a997327dcc4098ba61bea42a3173b3e0b7cca4a8a82d7573f9be364bc570f7d2eac8ebe7aaa77028
-
SSDEEP
49152:G69N48Eb0jmrDLlyPCN1E4eYNWwPj2QnjLaPzKpZBiV:G69nEbYm/Wq1EEDPj2QjmrKpZBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 75af04d8fb78b273ecc61bef289f00a1
Files
-
75af04d8fb78b273ecc61bef289f00a1.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 832KB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 43KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 486KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pop Size: 582KB - Virtual size: 584KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE