Static task
static1
Behavioral task
behavioral1
Sample
c645711eb5b09cec326de1b14ad85512.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c645711eb5b09cec326de1b14ad85512.exe
Resource
win10v2004-20240226-en
General
-
Target
c645711eb5b09cec326de1b14ad85512
-
Size
125KB
-
MD5
c645711eb5b09cec326de1b14ad85512
-
SHA1
1260e8016d49e3f712540ee677cd7f2a9bd8735a
-
SHA256
26a8491d694c4e7f7692c86de888ace0c828c22c45bfec82cce6ac96ca21723c
-
SHA512
9520cb6b7203c854922a2a3145edd57f063e172ea7ecda86a287ee57528abf164bc9b1dc085cd2e6bb34383297406a1c8cf4390999fbebd6db3fed3592678055
-
SSDEEP
1536:kzlE0DhQC579DjkgIfHf1ahXWbYBFZHb9hkg4jFstcAAckt8yJ/53Bpu1/D2c1qT:cTTC3BaDDeUWGObrYGVCUT0C
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c645711eb5b09cec326de1b14ad85512
Files
-
c645711eb5b09cec326de1b14ad85512.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 269B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 808B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 776B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ