Static task
static1
Behavioral task
behavioral1
Sample
c42ad68ab9605075b7825bfcd9924e2e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c42ad68ab9605075b7825bfcd9924e2e.exe
Resource
win10v2004-20240226-en
General
-
Target
c42ad68ab9605075b7825bfcd9924e2e
-
Size
411KB
-
MD5
c42ad68ab9605075b7825bfcd9924e2e
-
SHA1
4f52aadce7d70db08106a85e0b0ca3cc5c3c1f78
-
SHA256
8b5f87cc1f35551b116e0fafe4853a0ffa3c19593fd2c302ac5aba40919c442f
-
SHA512
abb2a3aeec35717b8c104c389286b936b34db91a153c446c3df943076518249dd0176c457217015fcdf04140d5f7709ffd1640a664584f7a247c73545ecb3497
-
SSDEEP
12288:EeBkvLMW7MaYx1mJrnlNJkvIk5dMO+Vv3jFX7vOk:EeK0JPsjlNJ2Igdy3jFyk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c42ad68ab9605075b7825bfcd9924e2e
Files
-
c42ad68ab9605075b7825bfcd9924e2e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
hmimys Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 368KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PopSky Size: 410KB - Virtual size: 412KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE