Static task
static1
Behavioral task
behavioral1
Sample
a79b191406185748fc6920da63326a779e51461e9930df7d16bc43f56aa4198b.exe
Resource
win7-20240221-en
General
-
Target
a79b191406185748fc6920da63326a779e51461e9930df7d16bc43f56aa4198b
-
Size
244KB
-
MD5
c690d4f0edc315b63840feb56c741aed
-
SHA1
3ce372423df202545409a54cb9c776e7c6e5c0a7
-
SHA256
a79b191406185748fc6920da63326a779e51461e9930df7d16bc43f56aa4198b
-
SHA512
dfcff8f5218e9fd6f39943ac868f049b66da88bd3b46719ebe8a6132bb37aa2f2de31f0d51a467979990c4a16c72043a158f2257097b644323b1bbfbfa091701
-
SSDEEP
6144:n3C9BRo/AIX27NHWpU00VIxas1oa3YiFRV:n3C9uD6AUDCa4NYmRV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a79b191406185748fc6920da63326a779e51461e9930df7d16bc43f56aa4198b
Files
-
a79b191406185748fc6920da63326a779e51461e9930df7d16bc43f56aa4198b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ