Static task
static1
Behavioral task
behavioral1
Sample
d42786af3c18095c14bb331b02014408.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d42786af3c18095c14bb331b02014408.exe
Resource
win10v2004-20240226-en
General
-
Target
d42786af3c18095c14bb331b02014408
-
Size
12KB
-
MD5
d42786af3c18095c14bb331b02014408
-
SHA1
1b4185197a89f45eb37f60cc5fb21efbfedaf321
-
SHA256
84bb6d7650069c68ece6caac9d05b9d4241c6e276e092af9adc884a77aa624c8
-
SHA512
4c7f2de9b536d90bf260bfd0d0fbd7218a64481e603d158bebb2aeca5423a385f908f00cab808314e0ac151ed084c1ff06944266cbabaf230461179c9be7d5ea
-
SSDEEP
192:nvs6qdpMfuqVSB3jhYyknGBcp4cQxBLB:vVqdpMWqVSBtYyUScLQxBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42786af3c18095c14bb331b02014408
Files
-
d42786af3c18095c14bb331b02014408.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ