Static task
static1
Behavioral task
behavioral1
Sample
c8404b4b28042adde40484ff6f014172.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c8404b4b28042adde40484ff6f014172.exe
Resource
win10v2004-20240226-en
General
-
Target
c8404b4b28042adde40484ff6f014172
-
Size
26KB
-
MD5
c8404b4b28042adde40484ff6f014172
-
SHA1
d2e15b2480bb3c0aa96ee90b672cc0608f82d76a
-
SHA256
6c1b8955dc782f51a5707af90fac083638fda4ca1961c67b8d1d6bfd6272c160
-
SHA512
d79665c49b1d866f7dbd15b342c22db094b7b59ad2bac3163d47a6f24802ddc3f45a46e4d5b4a6a28f3032643711a5529fbeb56f8f234937e98aaaa0b134ab58
-
SSDEEP
768:702lHt0dcYsITFT2NZ8ChLSn4wrncRB4f7:7021F9IJMWMG94RO7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8404b4b28042adde40484ff6f014172
Files
-
c8404b4b28042adde40484ff6f014172.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 25KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE