Static task
static1
Behavioral task
behavioral1
Sample
ad8ac49d4a960ef0a7ecfa26a9960378.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ad8ac49d4a960ef0a7ecfa26a9960378.exe
Resource
win10v2004-20240226-en
General
-
Target
ad8ac49d4a960ef0a7ecfa26a9960378
-
Size
124KB
-
MD5
ad8ac49d4a960ef0a7ecfa26a9960378
-
SHA1
8a9cdab464b5bb8ee3ce4cbe1488351750233bfc
-
SHA256
64ab1dc2a81ba40b49570b1a056d032c33aec0ff48435fa7c537bcc9c3f40ce3
-
SHA512
72655a4f0e2e5aeae54cb920afe435327715eb178c152be23dad09d8036a93ebc3679797d626eeef8dd7b3e4a0e1281eea47d9be55591bb5603ed806c2324650
-
SSDEEP
3072:amJ+TawAmVI681XiLTcUXONXIC6qpQsDB9o14LEfC2k+e6w:amwaXmid1X6QUelImQsDzo+LE5eJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ad8ac49d4a960ef0a7ecfa26a9960378
Files
-
ad8ac49d4a960ef0a7ecfa26a9960378.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 119KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE