Static task
static1
Behavioral task
behavioral1
Sample
c064f874d8b58d8dd362a36a9b205521.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c064f874d8b58d8dd362a36a9b205521.exe
Resource
win10v2004-20240226-en
General
-
Target
c064f874d8b58d8dd362a36a9b205521
-
Size
364KB
-
MD5
c064f874d8b58d8dd362a36a9b205521
-
SHA1
0968d0508c6382fffbf82b107dac51a7a875d7b0
-
SHA256
2af12504b1b466d0f146cd4c583c53e9d6b093a45e9dce98864218e23b8a20d8
-
SHA512
c23a291e89c7853d4fa3f33d02dc7e57eea2d9324c9390cd3e8d8f10675f3d2341c7227854056fa588b5aa33ea6ca087904971e6642571d58349e7630e3c5e8e
-
SSDEEP
6144:lAgn2ZavFeKu5l2JPUf9zRcEGDuLHiAsLqH5UgkP9cYKxdeCJFRTYU:6g2CMQJI91ctD66qHG195KxPTh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c064f874d8b58d8dd362a36a9b205521
Files
-
c064f874d8b58d8dd362a36a9b205521.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 20KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
3323232 Size: 332KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE