Static task
static1
Behavioral task
behavioral1
Sample
797928f1509074c5affd6f6082a1a37a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
797928f1509074c5affd6f6082a1a37a.exe
Resource
win10v2004-20231215-en
General
-
Target
797928f1509074c5affd6f6082a1a37a
-
Size
1.2MB
-
MD5
797928f1509074c5affd6f6082a1a37a
-
SHA1
09538046e9bb4c77145d15279a32c5f3b056d5b6
-
SHA256
8764e63ba0ca5ccdb856dbd7b58035cb956feb71f1b0ce112b106692f3cfe804
-
SHA512
68ebeee5c93f96bb0237baa3becd4cfc10af0cb87d387cb7f4c850f58c8535e36b67286209e93d01f8e7979bead95e5103cfc583483cc0e21ab7b2d0976c69e9
-
SSDEEP
12288:opuXukhvhpjVwMQE3+5kWnokZAXR0qcjfwy0sQvXKvFZACED0G:oQXbvj2Mv3+5gkZA+qcbwLsQPMED
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 797928f1509074c5affd6f6082a1a37a
Files
-
797928f1509074c5affd6f6082a1a37a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: 908KB - Virtual size: 908KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 272KB - Virtual size: 272KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE