Static task
static1
Behavioral task
behavioral1
Sample
7fea3ea00e89d11442848d70109e9e87.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7fea3ea00e89d11442848d70109e9e87.exe
Resource
win10v2004-20231222-en
General
-
Target
7fea3ea00e89d11442848d70109e9e87
-
Size
546KB
-
MD5
7fea3ea00e89d11442848d70109e9e87
-
SHA1
c9265386e38561be99b160042ead7306ec4b9e25
-
SHA256
dd3ad8668cc3f9c0ab17885e2f9b6fc5502187a45e2e56c574da3c4ef84a8db3
-
SHA512
4f70db9c9391fb2c984a5f962c1b5e7fca767b716786bdff68c3ab7992a77aaadbda4fa4f1309e1358df56bd1119b24986855304545c70c95f325acc875673ac
-
SSDEEP
6144:sbNd0aiJDu/ftysSL4J7lTxoaWccFvrQOmFbUPtjxBMGfVn94RVi6Q4r7Rgb2D/u:Eb0aiJDlNMksOmkMG9nkVLh7RZ/dJS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7fea3ea00e89d11442848d70109e9e87
Files
-
7fea3ea00e89d11442848d70109e9e87.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 15KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ