Static task
static1
Behavioral task
behavioral1
Sample
64bbdd365bea38a7d4807e4ff9702c319997c3105eac673a4df8fd2ba9a35e43.exe
Resource
win7-20240221-en
General
-
Target
64bbdd365bea38a7d4807e4ff9702c319997c3105eac673a4df8fd2ba9a35e43
-
Size
402KB
-
MD5
56de26ee7c7a6f9d5a5105d8a76cdf07
-
SHA1
efa54ddeeecbc708d8089118fe887e60aca1745c
-
SHA256
64bbdd365bea38a7d4807e4ff9702c319997c3105eac673a4df8fd2ba9a35e43
-
SHA512
c3cda30f40529bf1fe0aebef00f18ab06ba792048a3edf70738fbdb3abf6c899960af36a5cb4d562d67d16daef521d76913fc015dafd4a210bb58b29a122eb34
-
SSDEEP
6144:TXX4gFHY8fAgf6J3Yn4EB9+6pER2bSIjCoUnf6cefhAXwKVFiNB7omVI0N:EgFHvAgiJo4EB9+0GvpNaAAKAF7N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64bbdd365bea38a7d4807e4ff9702c319997c3105eac673a4df8fd2ba9a35e43
Files
-
64bbdd365bea38a7d4807e4ff9702c319997c3105eac673a4df8fd2ba9a35e43.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 516B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 6KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ