Static task
static1
Behavioral task
behavioral1
Sample
adda062b81457969087ad3a382cba3c4.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
adda062b81457969087ad3a382cba3c4.exe
Resource
win10v2004-20240226-en
General
-
Target
adda062b81457969087ad3a382cba3c4
-
Size
79KB
-
MD5
adda062b81457969087ad3a382cba3c4
-
SHA1
ba82c053c46c21640afd24c8557e6992a1917a80
-
SHA256
1e961b63abaa5e67555d3f01d445189e9dfbbd2770c1d50e9e1da2afafebdfe5
-
SHA512
3178d183779c1e62f5f05949be085e5c21b86bff13dc0fd44a950922fae00ad9b66249a809b8f4ab2f00055ffb8982985600e9ab9e02baf0c44fa504365d9b17
-
SSDEEP
1536:RDAzgDL2dZyG2R8qzgRZaNHnV3Y9redZvUd00ZhHKCaiBt5:RDAz9yGwUQC9r2Zcy0NKCrBj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource adda062b81457969087ad3a382cba3c4
Files
-
adda062b81457969087ad3a382cba3c4.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
m9 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m8 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m7 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m6 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m5 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m4 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
m3 Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 1024B - Virtual size: 691B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ