Static task
static1
Behavioral task
behavioral1
Sample
ad6366b648d2745e09aed6a79a368fdc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ad6366b648d2745e09aed6a79a368fdc.exe
Resource
win10v2004-20240226-en
General
-
Target
ad6366b648d2745e09aed6a79a368fdc
-
Size
3.1MB
-
MD5
ad6366b648d2745e09aed6a79a368fdc
-
SHA1
9e306853f1b6c7a0b16395f443a09b2d53628299
-
SHA256
fa3bd948693bdabbe292930ddf46d0f3bc3904d8a6fd6ba1b287394d3237d791
-
SHA512
d6522975106fdb0f0f6606e7de7b46d870527ee9abf364cfc17968448eb7ecff32b9af381c127ddba6564362e6d73293dbff8a97a82fcc6cd98fe08336daffb1
-
SSDEEP
49152:JLfU3LfU3LfU3LfUloJdXN0BMOwLloBrugXcY/x:IJdXN0B7+sOW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad6366b648d2745e09aed6a79a368fdc
Files
-
ad6366b648d2745e09aed6a79a368fdc.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 325B - Virtual size: 325B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ