Static task
static1
Behavioral task
behavioral1
Sample
d35e66ec32af64a00d7a607fa16fb38a.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d35e66ec32af64a00d7a607fa16fb38a.exe
Resource
win10v2004-20240226-en
General
-
Target
d35e66ec32af64a00d7a607fa16fb38a
-
Size
512KB
-
MD5
d35e66ec32af64a00d7a607fa16fb38a
-
SHA1
381f143320f65afcf54aea505d9edf3123eb1359
-
SHA256
bb21f526abe22845ff43442e283a2287c85a497929ac5606d34926ba16b0cd53
-
SHA512
b16f8875d4aaaa8b2382e33936a37c25965df0539a3958693133b509774ecd56c09a132b5da84b1ba8d1c488289d1653fb7d141f25b832724c1d619684da7219
-
SSDEEP
12288:H6JAL2ZgQ+fgCM28SQg+kbNw5k4FZBUqu2DOg3KRl:aJASZgQaM28xkbW5k4FnUqu76KRl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d35e66ec32af64a00d7a607fa16fb38a
Files
-
d35e66ec32af64a00d7a607fa16fb38a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 805KB - Virtual size: 808KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 221B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE