Static task
static1
Behavioral task
behavioral1
Sample
7944d3a69eea14704a7830b35811cf85.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7944d3a69eea14704a7830b35811cf85.exe
Resource
win10v2004-20231215-en
General
-
Target
7944d3a69eea14704a7830b35811cf85
-
Size
73KB
-
MD5
7944d3a69eea14704a7830b35811cf85
-
SHA1
e6e120da8cd83887904ba586e756afcc170d5eae
-
SHA256
8850649548b50a0ce41629ecf2a1be4a557c9a8c6a103c1414b9a61ec1fa62b9
-
SHA512
e8382ed07c6b670b66859c5969a525d0abdb8398ac83f0020b9ede9a9e980749089105b47b5d28a5f6718e48b3d40c161385210da8c74ecaf5c4215e39d7d79c
-
SSDEEP
1536:Zv3AbWFEPhJBFhF1TJWQYmq0SnOBv/EPP:ZIbMaJ7hFSQpq0S8vi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7944d3a69eea14704a7830b35811cf85
Files
-
7944d3a69eea14704a7830b35811cf85.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RELoc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.teXt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.TEXt Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RdATa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edATa Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ