Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Backdoor.Win32.Tiny.exe
Resource
win7-20240221-en
General
-
Target
HEUR-Backdoor.Win32.Tiny.gen-3a06ba711f4995d37e32ebc924d06e4aad7fcc41b10d7316cb7a7db1beda0a46
-
Size
369KB
-
MD5
4a62bfac53b6255f50703b5b2d0e1c63
-
SHA1
91b92259cc7acc69bd7e386023b79971983f6c90
-
SHA256
3a06ba711f4995d37e32ebc924d06e4aad7fcc41b10d7316cb7a7db1beda0a46
-
SHA512
b6093c4fb4caa633274eb447d2104d1bb5fa5283fb4e14fd12299279f151aa6674aa4171e4a65bbfafbd23e11a1aeaab5a1adb69f4345a32bd8d0c1b21e9e627
-
SSDEEP
6144:n3C9BRIG0asYFm71mJl3/X8mak5gNv9rC8IwLaYNUvtTxTKMMs:n3C9uYA7i3/stR9HGYyvtTxTKMF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HEUR-Backdoor.Win32.Tiny.gen-3a06ba711f4995d37e32ebc924d06e4aad7fcc41b10d7316cb7a7db1beda0a46
Files
-
HEUR-Backdoor.Win32.Tiny.gen-3a06ba711f4995d37e32ebc924d06e4aad7fcc41b10d7316cb7a7db1beda0a46.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ