Static task
static1
Behavioral task
behavioral1
Sample
894f9b7d0ee23fec311e38d8e3e5effa.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
894f9b7d0ee23fec311e38d8e3e5effa.exe
Resource
win10v2004-20231215-en
General
-
Target
894f9b7d0ee23fec311e38d8e3e5effa
-
Size
506KB
-
MD5
894f9b7d0ee23fec311e38d8e3e5effa
-
SHA1
3533c7882b015bb2f1c1557e6a7a07db1478fce4
-
SHA256
e613b06bcfcd61817fb57faf12a53b5f15f09cc6678fa6be59bbd0e6303abd66
-
SHA512
910721d7f52627d59a503eb633dd0f4e9170b6b4fb42093c86b4fdbbd33baf0b24088cdee7a937683c2fb6025c1c2156f7637cec91d827e597101cb0dbcb10de
-
SSDEEP
12288:PvIa1LtcuRZxFhgPxoBNul7SoTfEhs+f0pfKSiBKLuZlyeTf8alJs2g2RaTkllGu:PAa1LttrKJaNaTshs+wFiXZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 894f9b7d0ee23fec311e38d8e3e5effa
Files
-
894f9b7d0ee23fec311e38d8e3e5effa.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ