Static task
static1
Behavioral task
behavioral1
Sample
c402718fdea8f374f70d6da8480ba89e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c402718fdea8f374f70d6da8480ba89e.exe
Resource
win10v2004-20240226-en
General
-
Target
c402718fdea8f374f70d6da8480ba89e
-
Size
1.5MB
-
MD5
c402718fdea8f374f70d6da8480ba89e
-
SHA1
0f29276505503bdff48a96a6381293f5e05e2c1f
-
SHA256
4f8e6c67f689e951d9e1510f37a2b8b48e43c5a29bf637581961fde449d5cd5b
-
SHA512
3878f6fc527f7e3c23d14dded0e5352b4f98d501342eb8a3f46d6640f3a31a954387525d5bbacaaa2d5abdce0dd4f496b92b316cd9a888e88da63598813d5361
-
SSDEEP
49152:lrq0R07QQmTZKOrjOH3ekuWTpGbLZKjEf8f:hq0+7VO+H3ekxT8bi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c402718fdea8f374f70d6da8480ba89e
Files
-
c402718fdea8f374f70d6da8480ba89e.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 484KB - Virtual size: 716KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.0MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
petite Size: 676B - Virtual size: 676B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ