Static task
static1
Behavioral task
behavioral1
Sample
7a9f8fab786430787c1bee137756f5f3.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7a9f8fab786430787c1bee137756f5f3.exe
Resource
win10v2004-20231215-en
General
-
Target
7a9f8fab786430787c1bee137756f5f3
-
Size
426KB
-
MD5
7a9f8fab786430787c1bee137756f5f3
-
SHA1
0f867b72b58a6372e79e0c60610ccec85d781e07
-
SHA256
09ff1104aa6f2839c165ce16200ce8665a14b662b7e66a9765c82b94697159c9
-
SHA512
8799cecbb3a05be2c63aa4077415bada09a401c46648c9ad9d95e0f284ce27df8f8d1b25e9f00ba99c031d194d34d2b126bd81667344403c102ef7458560caf3
-
SSDEEP
6144:qTlH+xtAzBk4c8BqfglEoXt9nBZalKj9GVkU0tRjnlwAhkWmu7pgymk6uRMW3G+k:qReCy3fwjBIlSGuUC19zLpgr7EMW3nw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7a9f8fab786430787c1bee137756f5f3
Files
-
7a9f8fab786430787c1bee137756f5f3.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Winampa Size: 405KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE