Static task
static1
Behavioral task
behavioral1
Sample
ce7bac9352e853f66edc78dc84c2004f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ce7bac9352e853f66edc78dc84c2004f.exe
Resource
win10v2004-20231215-en
General
-
Target
ce7bac9352e853f66edc78dc84c2004f
-
Size
156KB
-
MD5
ce7bac9352e853f66edc78dc84c2004f
-
SHA1
86b8d8f38694836e626bebc0f38f409dde272ebe
-
SHA256
bd93a5c9004d83ffce8ba62ccd5c84cd730aaba7374e30c4dd9ecf0ae2064dee
-
SHA512
a7d1af49fd967e49816b492e3cfd9cd2ed0f309464df35a325cbc3ba84a3c013ca625be63980d722668e1d1b7f921fa61a2535c4f8d091ed5ed31e8a9e1532df
-
SSDEEP
3072:vAl50czSf2PEpfI9ZfEoA2Rz1IC1eo9O9:vAU1eomZpWueoE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource ce7bac9352e853f66edc78dc84c2004f
Files
-
ce7bac9352e853f66edc78dc84c2004f.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size:
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.Leja Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Leja Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ