Static task
static1
Behavioral task
behavioral1
Sample
79bf3ddb6caa8bdd6b9dd544e76529d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
79bf3ddb6caa8bdd6b9dd544e76529d4.exe
Resource
win10v2004-20231215-en
General
-
Target
79bf3ddb6caa8bdd6b9dd544e76529d4
-
Size
93KB
-
MD5
79bf3ddb6caa8bdd6b9dd544e76529d4
-
SHA1
e514fdc2f7dd81f6ea899a3612697a173a2ecd15
-
SHA256
bd8eabd12969418533faf140730d8ca01d2b158ae9939ce5ec8ab23457e22faa
-
SHA512
19025ce38b021c2eb4fe81f743fd9d261754343f69ad76a752d87859e6d2b38ad0751b402e9bbff22d0466da3180c8d24ba14fe15d831299e74f4a6b4ae2db2d
-
SSDEEP
1536:QEkli/on8iuosyM86OIn5xPaCITE363iJOl7C257H6/T71og6w5w8:VkktRB3DITE3WiJUC2wH1RV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79bf3ddb6caa8bdd6b9dd544e76529d4
Files
-
79bf3ddb6caa8bdd6b9dd544e76529d4.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.neolit Size: 6KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE