Static task
static1
Behavioral task
behavioral1
Sample
791d3a5a22a3560d166eeb72ccfe9e56.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
791d3a5a22a3560d166eeb72ccfe9e56.exe
Resource
win10v2004-20231222-en
General
-
Target
791d3a5a22a3560d166eeb72ccfe9e56
-
Size
128KB
-
MD5
791d3a5a22a3560d166eeb72ccfe9e56
-
SHA1
a9c4d12018c927a2d3e8a021f001747669e8d7a0
-
SHA256
d3ca21c72560491c7292bd7471bc6c6bef15a8312730d051963588fd77613b00
-
SHA512
b7b72703477e2986a2aa4f1261f2e57ffd960fcfd1477d72c9b467c764cd211bcc45885054de8bc9fc4123ca345e66a610976870a7544ed70469623f03fa564b
-
SSDEEP
1536:JIGr9VactDl5lx9HGpfcfh0x+z/e4mQWXZBCy1X5uBs:JLBVXHOE/BSJB11X5uBs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 791d3a5a22a3560d166eeb72ccfe9e56
Files
-
791d3a5a22a3560d166eeb72ccfe9e56.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 211KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ