Static task
static1
Behavioral task
behavioral1
Sample
763b04ef2d0954c7ecf394249665bcd71eeafebc3a66a27b010f558fd59dbdeb.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
763b04ef2d0954c7ecf394249665bcd71eeafebc3a66a27b010f558fd59dbdeb.exe
Resource
win10v2004-20231215-en
General
-
Target
763b04ef2d0954c7ecf394249665bcd71eeafebc3a66a27b010f558fd59dbdeb.exe
-
Size
66KB
-
MD5
eb1254fbcc08143f6e14e9f2dd82995b
-
SHA1
38fe3f1c54c1933cb86968a1abd238498a55ffd8
-
SHA256
ffd6d44ce6c0edc53b480d5050d037579e6fda3ce2c996f0a16b20d3c69fc528
-
SHA512
9ab4f49d9cae7365eb22b1281adf3e0bfa2f19320f1857fa68fb5d819cfb0f582d8a73a04f87ca50a1b94c117d06d6c96255310cb64db64925b99e53f66f93a2
-
SSDEEP
1536:HNeRBl5PT/rx1mzwRMSTdLpTM3G6+OjDSB0c4a+96tHUSc9u:HQRrmzwR5TpLOiiVWH9c9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 763b04ef2d0954c7ecf394249665bcd71eeafebc3a66a27b010f558fd59dbdeb.exe
Files
-
763b04ef2d0954c7ecf394249665bcd71eeafebc3a66a27b010f558fd59dbdeb.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.cdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE