Static task
static1
Behavioral task
behavioral1
Sample
a2945af96018779b08dde6f5a2d3f5d9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a2945af96018779b08dde6f5a2d3f5d9.exe
Resource
win10v2004-20240221-en
General
-
Target
a2945af96018779b08dde6f5a2d3f5d9
-
Size
122KB
-
MD5
a2945af96018779b08dde6f5a2d3f5d9
-
SHA1
de88774b120bf4d88c024e3ff8b3f2c57f03b8ea
-
SHA256
7b0265f9712d49f9f3f6398e0ad784713169d2e755a0a489905eb8e2352136ba
-
SHA512
7687c1c973ca3ad9d9357f511e3d0f363efc2454f645aed136b67563dfc0057e76e8574e52759ca73e89f3311750b8a2e1672f0d9ca3438564e5f8669fa681e9
-
SSDEEP
3072:GR+FG1gA3disauPrRvIACwd0S/TZOh4WiEY2Zw0ttdXg:GR+kSCwsauPV1P/Tc4YRndw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2945af96018779b08dde6f5a2d3f5d9
Files
-
a2945af96018779b08dde6f5a2d3f5d9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE