Static task
static1
Behavioral task
behavioral1
Sample
77028831629bc79880ca38678d61d765.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77028831629bc79880ca38678d61d765.exe
Resource
win10v2004-20231222-en
General
-
Target
77028831629bc79880ca38678d61d765
-
Size
78KB
-
MD5
77028831629bc79880ca38678d61d765
-
SHA1
0d1e2e20734172e6948a761d8e343428fa9352e5
-
SHA256
bcb43155521a538f5fe4353bd71a6eb13d325b0b1ea483636c742414ad509b5a
-
SHA512
a588daad27fa3c2d2fcf26083320dbc516488ab3008b919a78d0b562f175ce83263977696c216d0a400155ce363c6b8cdc2b2e596d535ea926f1e021796611c1
-
SSDEEP
1536:aE1hwzGx+4aS063TkYo2x6r59aPc8n2CST4+7QlKTCaWe96+g:d1sGx+n0YYox59R0+7QU6J+g
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77028831629bc79880ca38678d61d765
Files
-
77028831629bc79880ca38678d61d765.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
tapeworm Size: - Virtual size: 724KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tapeworm Size: 65KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tapeworm Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE