Static task
static1
Behavioral task
behavioral1
Sample
cdaf3a3687e9a05b26c11ebfe4d71a82.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cdaf3a3687e9a05b26c11ebfe4d71a82.exe
Resource
win10v2004-20240226-en
General
-
Target
cdaf3a3687e9a05b26c11ebfe4d71a82
-
Size
506KB
-
MD5
cdaf3a3687e9a05b26c11ebfe4d71a82
-
SHA1
b2feec812546efde4cf4263b531c2cd6ddd53761
-
SHA256
703b359f662bbf634c7b1315d699aa221d62c9fd3a43cd2ed94255c787b9c94e
-
SHA512
3228160f62b55c78be7c2c726f6b82e1e8ee75168dde5e750f84217f8958e8a6561d563b365c76db788de91ebe0bd7472496e97d72643b895203585a5fbfe5c0
-
SSDEEP
12288:+iwa7NR27OhY2/MyCROjn67nROHF7Tfauc8/cvloMT6:+iZZ07OhY9hROjn64NLe8/cNoMT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdaf3a3687e9a05b26c11ebfe4d71a82
Files
-
cdaf3a3687e9a05b26c11ebfe4d71a82.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ