Static task
static1
Behavioral task
behavioral1
Sample
cd79c68328460a2a05c20c60e0767b1c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd79c68328460a2a05c20c60e0767b1c.exe
Resource
win10v2004-20240226-en
General
-
Target
cd79c68328460a2a05c20c60e0767b1c
-
Size
184KB
-
MD5
cd79c68328460a2a05c20c60e0767b1c
-
SHA1
d63ed93a1d9780612b62fbcab473355b7a2be161
-
SHA256
8f3bc567d06b480aea10adc8cf6f89b8b6627b84faeb8e77f9a8219d6d0504be
-
SHA512
d61c27d2d2ce1e21518a39c28ff308fe96baa792bf7d4d94dbe5c28883a93a08917c9bfe636e76fbffd4ff3a3fde1fe18cf8a0e4427b9c4ae751284714e6c9b4
-
SSDEEP
3072:Chi6oSwFVuFmgLjjMB1Cl8SYmOOWtSilHVSxcGwPaylY3pFK:Chzov+mgTMPCl8u+byylY3pF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd79c68328460a2a05c20c60e0767b1c
Files
-
cd79c68328460a2a05c20c60e0767b1c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ