Static task
static1
Behavioral task
behavioral1
Sample
794ae11d73eb3e2cf0a7901d4112cfa5.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
794ae11d73eb3e2cf0a7901d4112cfa5.exe
Resource
win10v2004-20231215-en
General
-
Target
794ae11d73eb3e2cf0a7901d4112cfa5
-
Size
272KB
-
MD5
794ae11d73eb3e2cf0a7901d4112cfa5
-
SHA1
54d6a8494be38f73ff2679711316abf11be610e4
-
SHA256
491d33eaafffdb9cbccb6c072faa529ff3ab12fb509da6dd863517a30865369b
-
SHA512
8bd5dd80026133594b6458e0d4610f284f7dce253a14fe876322b465427bc63cc1048936ab4f00780e763bcdf88794b9f48b9578dab14eab03aa8953a09c752e
-
SSDEEP
6144:kbwhMeusxktCJ9fZjJ/BJZ8uwvAqvWtna7ACoOLEhiGm8B/Of:ewieusxWa75Jmj4Nna7vo04m8Ef
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 794ae11d73eb3e2cf0a7901d4112cfa5
Files
-
794ae11d73eb3e2cf0a7901d4112cfa5.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 271KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE