Static task
static1
Behavioral task
behavioral1
Sample
79d8a7053a70bfbb727b83431f9285bd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79d8a7053a70bfbb727b83431f9285bd.exe
Resource
win10v2004-20231215-en
General
-
Target
79d8a7053a70bfbb727b83431f9285bd
-
Size
97KB
-
MD5
79d8a7053a70bfbb727b83431f9285bd
-
SHA1
ee025a2b8873f75de04feceefb0fc051b39e22d2
-
SHA256
2ac3abc8f0596ef580479bfcc47d7d38757685bdf2c72d03b29eb7303c8ebfe9
-
SHA512
279da15356de8196e6489cdeb70db7e2268a635f97e2ce07380e850517ec26da77e3bae0405d33102056ea183d90a79a208215f13823e4efba4c5f80cd7d34d9
-
SSDEEP
1536:1HQlo9ZZYHPYKNToHnFh3LobXxxyu6RXfpPx7KnMvzSrp/+EEY4n:co9ZZYvAHnFhbIAXhPgnq+rpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79d8a7053a70bfbb727b83431f9285bd
Files
-
79d8a7053a70bfbb727b83431f9285bd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
kdf Size: 3KB - Virtual size: 92KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
lr Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9xs Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE