Static task
static1
Behavioral task
behavioral1
Sample
79f20f88b72ef0242a3b162b82ff9380.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79f20f88b72ef0242a3b162b82ff9380.exe
Resource
win10v2004-20231222-en
General
-
Target
79f20f88b72ef0242a3b162b82ff9380
-
Size
589KB
-
MD5
79f20f88b72ef0242a3b162b82ff9380
-
SHA1
5837dda09b8d939ac1a9c74d4f9691909c29d924
-
SHA256
cf44b20b770cde00a619c25200e06fe778bcf8aeca7da8cffa2f14362b34ec68
-
SHA512
129c331178fa1041da0ff2659cc9fbfd561cabd909392c81f8e2e71d69d044f7e7fd3c8dae69d8ceb2d00ed0c9c032a07264dc62db7ca534289dd70da76a83d8
-
SSDEEP
12288:S8vZ2erJBX2Lec/lTKsF3Z4mxxGMaL+ksoWA:BvZTrHSec9KsQmXGr6kX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79f20f88b72ef0242a3b162b82ff9380
Files
-
79f20f88b72ef0242a3b162b82ff9380.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 264KB - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 318KB - Virtual size: 320KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE