Static task
static1
Behavioral task
behavioral1
Sample
cde81fde4a4580e70a2b84696ff898f6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cde81fde4a4580e70a2b84696ff898f6.exe
Resource
win10v2004-20240226-en
General
-
Target
cde81fde4a4580e70a2b84696ff898f6
-
Size
869KB
-
MD5
cde81fde4a4580e70a2b84696ff898f6
-
SHA1
e2a43cf24379eb83ab6fb12e8192aad0cd4737d3
-
SHA256
dd7dbe040bd7e72968f81958ec1e0a7eee5da0992c34ef664fc22a68aa73968a
-
SHA512
39176e1b80b714637bdbd26514d91fbab596f46c4ff435c9e334b8cba420dd2349b44f7c7dbc74be989af99b0b95adccdb6f5fd87887b0222aa7d9dab154578b
-
SSDEEP
12288:UZWtI6RkLunuVO6unulONunuVO6unuyccrL:UuhaOcrL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde81fde4a4580e70a2b84696ff898f6
Files
-
cde81fde4a4580e70a2b84696ff898f6.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ