Static task
static1
Behavioral task
behavioral1
Sample
79bb39efb6a3db1cc80fec783d7433dc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79bb39efb6a3db1cc80fec783d7433dc.exe
Resource
win10v2004-20231215-en
General
-
Target
79bb39efb6a3db1cc80fec783d7433dc
-
Size
460KB
-
MD5
79bb39efb6a3db1cc80fec783d7433dc
-
SHA1
0572a135bdcff23c206c27cace05dbb5af90dbd1
-
SHA256
d1e44214a8623957b08c5ff8281205ac013b7a014c73ed1f40fb17c08042b43c
-
SHA512
d64a2492ef197f4d08e2af54caad6220b1ddc26033b0b11f81caf516fbd3d9e22befb4789a8d8fae99a211e4908133395a6d9d8897c6a65341cb5b6fc112bada
-
SSDEEP
12288:lju51Ffp4ju51Ffpp7U7Zilwg4i5qqxW416:E51FL51FfwJi1W4Q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79bb39efb6a3db1cc80fec783d7433dc
Files
-
79bb39efb6a3db1cc80fec783d7433dc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 220KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 16KB
IMAGE_SCN_MEM_READ
.ndata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 35.3MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 193KB - Virtual size: 193KB
IMAGE_SCN_MEM_READ