Static task
static1
Behavioral task
behavioral1
Sample
79208098fb64e8d267f112a0aca40e4d.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79208098fb64e8d267f112a0aca40e4d.exe
Resource
win10v2004-20231215-en
General
-
Target
79208098fb64e8d267f112a0aca40e4d
-
Size
50KB
-
MD5
79208098fb64e8d267f112a0aca40e4d
-
SHA1
6af85ef1a837656869894459942b2f9d181e8670
-
SHA256
0661d7f48240df99f43b995ae762104bb5d79e44453b0b4b7bfa651a6c60c746
-
SHA512
dbc89dda065414e921b74b3a192fd5d032295f1102180b4ef53c70b73d21d6839322d8d6d570109b8787f6d15e2878d4d720a610d005d7cd5ca15bdd40d0933a
-
SSDEEP
1536:IYi2KR2kbdwZVoz6XZM7p1c7j6crvEHNT6b/0x9p9Cq:IYivR2aWozYZkua8b/g9p9Cq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79208098fb64e8d267f112a0aca40e4d
Files
-
79208098fb64e8d267f112a0aca40e4d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 50KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE