Static task
static1
Behavioral task
behavioral1
Sample
c456c7b197092d32cfe71d2e9344476a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c456c7b197092d32cfe71d2e9344476a.exe
Resource
win10v2004-20231215-en
General
-
Target
c456c7b197092d32cfe71d2e9344476a
-
Size
15KB
-
MD5
c456c7b197092d32cfe71d2e9344476a
-
SHA1
68cfbc0e7d55b202d04587a37564be9faca5e2ae
-
SHA256
c038f25b6c86896fa64446f9cc44b5126e85708ccd1514cbcd373ffe5f12678e
-
SHA512
f0ab26a54f3e6a8bd005ddeca818ab16dacf6a6302b5f53adc4c35883b4721de35080c87816f3abc297647a7da84d15bcc7732127f9b8df213793ae430bb0ea3
-
SSDEEP
384:W0pqMpIXBe7/GjgM6qrYG8hViyaj65fEqQJ/xWGGu:ZpKXA7OjgMtrYG8hViyC6qqN+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c456c7b197092d32cfe71d2e9344476a
Files
-
c456c7b197092d32cfe71d2e9344476a.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ