Static task
static1
Behavioral task
behavioral1
Sample
efdc4eaf5d689dd00577d04b5b56f258.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
efdc4eaf5d689dd00577d04b5b56f258.exe
Resource
win10v2004-20231222-en
General
-
Target
efdc4eaf5d689dd00577d04b5b56f258.bin
-
Size
59KB
-
MD5
efdc4eaf5d689dd00577d04b5b56f258
-
SHA1
ca6d59ed62bd057cbbed338b85079141ed1b8126
-
SHA256
55895dbf802f9f4ec6ff2a273b40f9438165f500655aad3372b709fb124b2825
-
SHA512
3581cabfd41fbde4d8f8d58385d9ed30c3789371aff9229818e032d0c2810a1f1efb25556b5e49cd9f60f59ad39bd59110b5f0ece54a16ce7072de33409a3387
-
SSDEEP
768:WzyI2zdv7uiQkNfHd3z8REq2l6dsM3qe+aR3J5llXqFBMv5hZTQdf4PyUHOfCEP:WmIgZzQeHd3z81d8e+M9lXqzuXufCq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efdc4eaf5d689dd00577d04b5b56f258.bin
Files
-
efdc4eaf5d689dd00577d04b5b56f258.bin.exe windows:4 windows x86 arch:x86
79b3362178937bf9559741c46bb9e035
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 99KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 174KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 5KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 58KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ