Static task
static1
Behavioral task
behavioral1
Sample
7dc92af8bc4efd8f3cbe53a17df693e9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7dc92af8bc4efd8f3cbe53a17df693e9.exe
Resource
win10v2004-20231222-en
General
-
Target
7dc92af8bc4efd8f3cbe53a17df693e9
-
Size
613KB
-
MD5
7dc92af8bc4efd8f3cbe53a17df693e9
-
SHA1
25ce7b8cb9a0f3518ed2dc95aff9a0235fe5e7a7
-
SHA256
ef7c81caad86886177cb57b83f4db9c656f1cc2c012dae71ed710be27ba5a344
-
SHA512
c68ba4ab63a984d60b0a9a4c568b211997c4ce5875ed6d1cce349472c4fe4bd3598d3994a62213b6ff1d72b3095e9e308d7e237b0c47540aef5b38cb5f3b9979
-
SSDEEP
12288:HhuQzxPesHNimGRnY6OjB9k53Ck3GteLyiCPNwwlHzvYspJ/WqiqCYg8S:HhuQdPesHNiTR7sB9q30iqB0BqHg8S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7dc92af8bc4efd8f3cbe53a17df693e9
Files
-
7dc92af8bc4efd8f3cbe53a17df693e9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 486KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 1KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 113KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ