Static task
static1
Behavioral task
behavioral1
Sample
7af9512b08450058c54fd3bedd30839e.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7af9512b08450058c54fd3bedd30839e.exe
Resource
win10v2004-20231215-en
General
-
Target
7af9512b08450058c54fd3bedd30839e
-
Size
89KB
-
MD5
7af9512b08450058c54fd3bedd30839e
-
SHA1
0fc84b5158cce75651642e3138d03b778f1be438
-
SHA256
3dd5b868d77004e7188da4d54527f41a69b0745b4fbee379dd6fd839e6f2bc90
-
SHA512
185775e78bb3a0518f9027369ea45231c7d49461308b3aead4d93ba3efa50a22535ae8ff407268f67b31b83f614c15d804ff68ec20860cc7812bcf0022241adc
-
SSDEEP
1536:LDtYhcTzwRwxmKo1bOHhw+zde576rN5JVOwm1xps2GgD0ScLK:LDeKzALKoAHbzE5w/WjwZSP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7af9512b08450058c54fd3bedd30839e
Files
-
7af9512b08450058c54fd3bedd30839e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Smiley0 Size: 4KB - Virtual size: 639B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Smiley Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 160KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE