GlobalCallback
Static task
static1
Behavioral task
behavioral1
Sample
964bf26cc6f4b50055972f82156e02ed.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
964bf26cc6f4b50055972f82156e02ed.exe
Resource
win10v2004-20231215-en
General
-
Target
964bf26cc6f4b50055972f82156e02ed
-
Size
769KB
-
MD5
964bf26cc6f4b50055972f82156e02ed
-
SHA1
25c84c293760b56d8268ce21b2827024af3019ea
-
SHA256
ff04299812257f312d19cd955372fcd84045562e45303b635597db5038e16742
-
SHA512
3832e436f900931bcd928872a524f203f74ae2cab59295b8468b4b50bbbbcd56377d707aa393947db321b02e503df6addbe8e0d2e55df2791b48688e7ffedcce
-
SSDEEP
12288:NUQwBucTKR9DL1A/0Pgzr04jsBzqknb0WOzi05155szjxCdY3ooa:JcmRDArvLOHwl1556cdY3ooa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 964bf26cc6f4b50055972f82156e02ed
Files
-
964bf26cc6f4b50055972f82156e02ed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.Upack Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 769KB - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE