Static task
static1
Behavioral task
behavioral1
Sample
826be4f51a3ff5d8be92cabc0ef7f2dd3e17afbe0a65aac179048e42af056e24.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
826be4f51a3ff5d8be92cabc0ef7f2dd3e17afbe0a65aac179048e42af056e24.exe
Resource
win10v2004-20240226-en
General
-
Target
826be4f51a3ff5d8be92cabc0ef7f2dd3e17afbe0a65aac179048e42af056e24
-
Size
96KB
-
MD5
4d1723178bd7a15a0c6ec1b0a6048fc7
-
SHA1
7c04c68b6c3bd8832f04e06a690a67a75bb02272
-
SHA256
826be4f51a3ff5d8be92cabc0ef7f2dd3e17afbe0a65aac179048e42af056e24
-
SHA512
eeff7da21c5e92bf02f5f63317f421ad345845e888a7b3565175147f618a5f640dcb50d3bf72b59c54534eb8ba2fff2ec8181651861abff9ef85639b41d20476
-
SSDEEP
1536:tyKgfkEuGVgu5uL0XRtgiVZhmGDzcGfduV9jojTIvjr:wKgfkFGtXRB/vcEd69jc0v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 826be4f51a3ff5d8be92cabc0ef7f2dd3e17afbe0a65aac179048e42af056e24
Files
-
826be4f51a3ff5d8be92cabc0ef7f2dd3e17afbe0a65aac179048e42af056e24.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ