Static task
static1
Behavioral task
behavioral1
Sample
790bdfac79d185982d122d9e543afd74.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
790bdfac79d185982d122d9e543afd74.exe
Resource
win10v2004-20231215-en
General
-
Target
790bdfac79d185982d122d9e543afd74
-
Size
587KB
-
MD5
790bdfac79d185982d122d9e543afd74
-
SHA1
2f70d0b4be975636fbfdbf897983f9f4fb463e6e
-
SHA256
383f295f0b57718cbd0c99865fe5b27c9f926a486cf04f67f781746bfc2ae71c
-
SHA512
1a1c49ff7b7a76ca7f18fd7e5eed0ed4d9114ff3347a50fac5b3723c4916b1cc8fcd21f7e0e723eeb6b3733abcd106c7a265a2d3deaa1422ae1f85fc6127879b
-
SSDEEP
12288:umqaR/QvkuaXUmZl1r8IfeCNBT5JYF3Z4mxxEoEtlK+kt9T2MBf:umh4/6RfeUfJYQmX9G8f
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 790bdfac79d185982d122d9e543afd74
Files
-
790bdfac79d185982d122d9e543afd74.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 728KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE