Static task
static1
Behavioral task
behavioral1
Sample
cd948491aa67ef6bf8522b29ae6d304e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd948491aa67ef6bf8522b29ae6d304e.exe
Resource
win10v2004-20240226-en
General
-
Target
cd948491aa67ef6bf8522b29ae6d304e
-
Size
1.3MB
-
MD5
cd948491aa67ef6bf8522b29ae6d304e
-
SHA1
ed8d147d04fbc1d4b23ef685cba3c32d38ce204d
-
SHA256
f26fd6224209426b4b3170e0fc10705996a168fb6c8a0d303ffff2d41ee320ff
-
SHA512
e2ac3844bdd8e9512683710220d69065e8f2646e0b4c1e99b2b17154e67ef3a8fb4fa51cef691dd1bd08daac9aa8f204719efe2d4ef935bde74f07141be67a2f
-
SSDEEP
24576:H1mrSawbdBqfRnVgY1TtspQ5oknECIGsjc0ztoUf9RtqPbLhsqh0T54u:VmOXqZTtsGKkEESc05T9vqDdsZf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd948491aa67ef6bf8522b29ae6d304e
Files
-
cd948491aa67ef6bf8522b29ae6d304e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: 334KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.x01 Size: 1011KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.noispor Size: 12KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE