Static task
static1
Behavioral task
behavioral1
Sample
83279e69d5667dd40bbcc27620d6497ce925b26d2a78d7f2a8a3642098708a96.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
83279e69d5667dd40bbcc27620d6497ce925b26d2a78d7f2a8a3642098708a96.exe
Resource
win10v2004-20240226-en
General
-
Target
83279e69d5667dd40bbcc27620d6497ce925b26d2a78d7f2a8a3642098708a96
-
Size
89KB
-
MD5
1835a52e30b08912b7faca9150dfa094
-
SHA1
e88e44c84d78839fb378050cae66e2627ea8e7f8
-
SHA256
83279e69d5667dd40bbcc27620d6497ce925b26d2a78d7f2a8a3642098708a96
-
SHA512
7f96d652e30cd9a710f7d7748d71988b2ac393c4632d940bdf37dbcfac2fc9c25d865b65f94bf89c9db6ffc5b471145c5ed97670927008a6065404dfa9b41e92
-
SSDEEP
1536:9OLNG5q/S3+CW0+wlSjDk9t9+5TUPagFdPbN8IjuoTGxYmcUzIXguXqcqlExkg8O:gLQ5qG+/0ZS/kTXVFdPWIxTGxwwWqcqa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83279e69d5667dd40bbcc27620d6497ce925b26d2a78d7f2a8a3642098708a96
Files
-
83279e69d5667dd40bbcc27620d6497ce925b26d2a78d7f2a8a3642098708a96.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ