Static task
static1
Behavioral task
behavioral1
Sample
79f289275aa7945b3306cfd9b03f0209.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79f289275aa7945b3306cfd9b03f0209.exe
Resource
win10v2004-20231215-en
General
-
Target
79f289275aa7945b3306cfd9b03f0209
-
Size
125KB
-
MD5
79f289275aa7945b3306cfd9b03f0209
-
SHA1
f919835b7487a5d52fdc98573ded419dc07c40ec
-
SHA256
089f84b587c556fc541b30513fbee1e0786b1d66c14b4a416f6f7112df135d74
-
SHA512
d5c9cbb4061248798c48f0c95f7e6a5b11cbc98a6275a17539866267da9e204ba481ee5516767436b08203d46a1147e029a81c880253398a24a856f80386e067
-
SSDEEP
3072:lABff5iFAdHTEWqCWkJTjD9YwcedmPNl886qANMmBjV:qff5SKzEWnDjRdbd2V69ntV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79f289275aa7945b3306cfd9b03f0209
Files
-
79f289275aa7945b3306cfd9b03f0209.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE