Static task
static1
Behavioral task
behavioral1
Sample
a35ef437ede8bda6c954cfdf558262c3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a35ef437ede8bda6c954cfdf558262c3.exe
Resource
win10v2004-20240221-en
General
-
Target
a35ef437ede8bda6c954cfdf558262c3
-
Size
58KB
-
MD5
a35ef437ede8bda6c954cfdf558262c3
-
SHA1
f4348aff4f5d0e36818826dc8b36ffa51cc2a61a
-
SHA256
e530ce95209c21904d52e4ca2a4d5af9e5ca6ac5e9738ba36880b51e64428c95
-
SHA512
68564ae4d02ebbea4a9e9fd74d1c6e2b6c136a9b426529fb2d6a46e41bb50f7d4dc1ecd91b95a48501e19e4325c9ef122a835b7e5dcbd96324526b592cbb43e3
-
SSDEEP
768:pYMSidhWzDBvSL8D/e7Omfd/EdLStPyxhBbQn0Y5kIZFEzYcSkz3Nr:pPvWzDOOBbQ0Oks0YcHz3Nr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a35ef437ede8bda6c954cfdf558262c3
Files
-
a35ef437ede8bda6c954cfdf558262c3.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
=> !17 Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ