Static task
static1
Behavioral task
behavioral1
Sample
c76ec835114b197cb5647488f20fd8b7.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c76ec835114b197cb5647488f20fd8b7.exe
Resource
win10v2004-20231215-en
General
-
Target
c76ec835114b197cb5647488f20fd8b7
-
Size
798KB
-
MD5
c76ec835114b197cb5647488f20fd8b7
-
SHA1
fc2f2e81ade43d07f9c0de7ca54e38b88d18e1bf
-
SHA256
086e4c78f0054b7865b8c2b4776091b21a9f0acd0976177708bb607a6e750437
-
SHA512
e34545003e9916ac0933abda59ddf1462333b1a78aaae992a196c7f312ca1132ff2eaa45880b979ee3c73b5c2d668b3fdb095b4e2ce32ad4ccaacc319b6aac03
-
SSDEEP
12288:kVkkm/NI34FTXVo7YNQA8YcKify3ieh420ZoFU3ejRydmKcF+YM29PDv0TI:0kkmu3JwQNsiK3VUZ2Lym1+O9P4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c76ec835114b197cb5647488f20fd8b7
Files
-
c76ec835114b197cb5647488f20fd8b7.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 177KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 15KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 598KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE