Static task
static1
Behavioral task
behavioral1
Sample
872369b4dcc03dd2528226d576a151cc.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
872369b4dcc03dd2528226d576a151cc.exe
Resource
win10v2004-20231215-en
General
-
Target
872369b4dcc03dd2528226d576a151cc
-
Size
392KB
-
MD5
872369b4dcc03dd2528226d576a151cc
-
SHA1
5ea58c549dae14c562592275d6f61b99c6c8509e
-
SHA256
0b25bca86b613b19a6a61e4d8a96f6c2987469f0c98da3ca88db4ef01d76325c
-
SHA512
960850983f25cd1fb71e4cea799c90677c35dba75bb4b329589268e6346d3957d327cea60e5b7309494b280d8284ff3d0d4ab0c0049c9359e28b4340c75b0521
-
SSDEEP
6144:JSOkGjCImoA6EOXg2X7cruFqaaHoeWXUzxqRiyEziD3cLxLKso:Jux0X4rqf8evD3cC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 872369b4dcc03dd2528226d576a151cc
Files
-
872369b4dcc03dd2528226d576a151cc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ