Static task
static1
Behavioral task
behavioral1
Sample
7a5d4876aef8cb39971e758356f62930.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a5d4876aef8cb39971e758356f62930.exe
Resource
win10v2004-20231222-en
General
-
Target
7a5d4876aef8cb39971e758356f62930
-
Size
56KB
-
MD5
7a5d4876aef8cb39971e758356f62930
-
SHA1
dcb2cd6db6acf627cbc0021dc9f4ab87e0532d0e
-
SHA256
e577b5e168caeeb4a26f319425d711f1c056fe444c48eece5fa0102afdaf8eb0
-
SHA512
caf4ca0bfd587ddd8cbbf179d44ea0139d1a0e1164967e6755ee99461cf3ea229fa9b8512652d19f7d26d3fad9bf0469d7ceb078103c4f6c6da1e3b8e4ae1008
-
SSDEEP
768:oeo8lyp7LvTGiGdC0T3PTNuPQMExXXPC2O8/W1atZJJ2WIwslf0MAqFhcp+IgJm+:oT0cLbGiEtxPnu8FtZJg/lf447
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a5d4876aef8cb39971e758356f62930
Files
-
7a5d4876aef8cb39971e758356f62930.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ