Static task
static1
Behavioral task
behavioral1
Sample
729fb16b88e394573f29f4acf74aa8ee5b0d60d9cf554cc08b49b99fe04a7877.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
729fb16b88e394573f29f4acf74aa8ee5b0d60d9cf554cc08b49b99fe04a7877.exe
Resource
win10v2004-20240226-en
General
-
Target
729fb16b88e394573f29f4acf74aa8ee5b0d60d9cf554cc08b49b99fe04a7877
-
Size
1.2MB
-
MD5
6c4f64ca5da9439c99555135ec273d29
-
SHA1
873e50b6c7546919dac7997c009fab3b70e0d62a
-
SHA256
729fb16b88e394573f29f4acf74aa8ee5b0d60d9cf554cc08b49b99fe04a7877
-
SHA512
026638a1b3550ff733ee9224f98d65e16d871826846873fc053c322f4c86e7f5881f5fac2047d0ef1ccfa7579d2564650a5108583d7576c6bcc817e472d2bde4
-
SSDEEP
24576:fXfARNLXDFariuNmW1UIw9Bco9t6uVpXFfhUdEM9lVNgUK:3sDFarpd13CNhXbnM9lV6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 729fb16b88e394573f29f4acf74aa8ee5b0d60d9cf554cc08b49b99fe04a7877
Files
-
729fb16b88e394573f29f4acf74aa8ee5b0d60d9cf554cc08b49b99fe04a7877.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 44KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 192KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 968KB - Virtual size: 968KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE