Static task
static1
Behavioral task
behavioral1
Sample
d497abc95c7f02a86cb90be6aecf6af0.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d497abc95c7f02a86cb90be6aecf6af0.exe
Resource
win10v2004-20240226-en
General
-
Target
d497abc95c7f02a86cb90be6aecf6af0
-
Size
334KB
-
MD5
d497abc95c7f02a86cb90be6aecf6af0
-
SHA1
194854e14331665423ac57172b8e4afe672759f7
-
SHA256
15167e792ffb24bc8dfc2bfd29f31d7649bb65ae640f9ba6dd1209d40f3fb6a9
-
SHA512
060a6967ea3d382ff765d97806a8d58c06a4738fb2db987df32181536e53e9bb589d5d7372e548f8ca959fa1cac3ff55ff5c5d5161e6f94f8d6f5881135fbfac
-
SSDEEP
6144:ywqowFQ2v7QFjKpSQ2KC2j/vBPTRFGmKkkHVp7rDqpFkigFQcaVX3jsXv8Lib:yjowqKp6SZPtgkk1p7yF6FQcASb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d497abc95c7f02a86cb90be6aecf6af0
Files
-
d497abc95c7f02a86cb90be6aecf6af0.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 303KB - Virtual size: 712KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE