Static task
static1
Behavioral task
behavioral1
Sample
7fe869d672c79441fcb5627b104b9679.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7fe869d672c79441fcb5627b104b9679.exe
Resource
win10v2004-20231215-en
General
-
Target
7fe869d672c79441fcb5627b104b9679
-
Size
718KB
-
MD5
7fe869d672c79441fcb5627b104b9679
-
SHA1
a040b1a33f8f66a6fb6d9b7278e5548844ef523f
-
SHA256
e3d295a303e1b664e297a9c5f2cf7e130f4f5a2ca7eb2e7358752b38cf914a77
-
SHA512
da2b31445e36b432c766ebbe8efb48f838bb51fc8363f7b9e58e1cc2f2010779d8efd416c2402c24525c9cc18749035510552b50a2b96a898e21e5b4aa61ae06
-
SSDEEP
12288:rSooy+098pZVEk4I6trQ9L9y8qQSJbuzD1JDtpkyS+yYh/YiyF3Z4mxxmNz8JlXE:rSoov5pn6pQb1Dt6HmhyQmXmSJGheht6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fe869d672c79441fcb5627b104b9679
Files
-
7fe869d672c79441fcb5627b104b9679.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 220KB - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 92KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.perplex Size: 374KB - Virtual size: 376KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE