Static task
static1
Behavioral task
behavioral1
Sample
79ec0d5a155f294d8657517e44594e30.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
79ec0d5a155f294d8657517e44594e30.exe
Resource
win10v2004-20231215-en
General
-
Target
79ec0d5a155f294d8657517e44594e30
-
Size
5.5MB
-
MD5
79ec0d5a155f294d8657517e44594e30
-
SHA1
15d96f356f40b76040f54192e495b3b632ca31bd
-
SHA256
02418045caf449cd45f3b7f9c377ed8ef989f0c7b44fcd28b22eec97a0965084
-
SHA512
570304e3ad44f01949895e4dccc915aabebb4fd00d7ab684490ed5fc1030cf7e0a3c9baa9ad46996f4db8f3115dc13495ebe3645d29b04e8d6c5ca0d2abe378c
-
SSDEEP
98304:Q85UkD1M4TnlEZTv15nhtt8Py9ZWJu/LlP+iw0RIFlAc1/1HiYKRoT163lpSHbNO:p7M4rlEZznnhMPy9ZjhP+ORIn1/1CYKR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79ec0d5a155f294d8657517e44594e30
Files
-
79ec0d5a155f294d8657517e44594e30.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 5.5MB - Virtual size: 5.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 177B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ