Static task
static1
Behavioral task
behavioral1
Sample
7e90bf1c494f9d31958497a13085b35a.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7e90bf1c494f9d31958497a13085b35a.exe
Resource
win10v2004-20231215-en
General
-
Target
7e90bf1c494f9d31958497a13085b35a
-
Size
23KB
-
MD5
7e90bf1c494f9d31958497a13085b35a
-
SHA1
7b94e447cc21ca4b0cf6e62fa8b68d2c067f8b61
-
SHA256
ae6bc7c5a660a8aea6e9968360e39bf78989f51982ad51525a7c10c191d8ad82
-
SHA512
57649659913e05a3b6e561b1fdd6befadd29f63d4b4308b680bbe5ca89c57bd3827d7d61c7bdb9ebd49ba3ee96bbf3ae55d03e5069d86817e20e378f0b9e5625
-
SSDEEP
384:s/se8zdTyBsyqAIZhgkybloK1/k0kRh7IdW4s9vm4Ng1tZBaFNTJgxDSkE/RawCW:jWsyqAggbb6Ek0kRh7Ik4ovm4etByNVr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7e90bf1c494f9d31958497a13085b35a
Files
-
7e90bf1c494f9d31958497a13085b35a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.petite Size: 15KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 329B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE