Static task
static1
Behavioral task
behavioral1
Sample
ad45e77a126e02c466bf14f76bd9f4be.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad45e77a126e02c466bf14f76bd9f4be.exe
Resource
win10v2004-20240226-en
General
-
Target
ad45e77a126e02c466bf14f76bd9f4be
-
Size
2.5MB
-
MD5
ad45e77a126e02c466bf14f76bd9f4be
-
SHA1
fb7f7425b70add2f4951cc26e1784b7bf89603ab
-
SHA256
bad95e1fc434dfb4ad9ddeea4ea603982688960b8a359327099fea7d2f344713
-
SHA512
0266e8f9a4672fd6b401d51a4834b38b672689c8883780a6bdc844eeb4f36c7c50c1ce1825214962d5b8ad9d9666b29d2fc67879841f8918e1bb253fe66ada19
-
SSDEEP
49152:ImQqEDcBt0WYNdcS8RSvkSbxSNyS9SSBbS7Fd7VBldvuxMSiKNZk:ImcKS8RSvkSbxSNyS9SSBbS7FDdGxMSy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad45e77a126e02c466bf14f76bd9f4be
Files
-
ad45e77a126e02c466bf14f76bd9f4be.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 2.2MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 191KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 50KB - Virtual size: 248.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 540KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.stolen Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE