Static task
static1
Behavioral task
behavioral1
Sample
d42df8be580224ca8a1ec60b30375020.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d42df8be580224ca8a1ec60b30375020.exe
Resource
win10v2004-20240226-en
General
-
Target
d42df8be580224ca8a1ec60b30375020
-
Size
253KB
-
MD5
d42df8be580224ca8a1ec60b30375020
-
SHA1
bd088aef5a2d7cc7aec98b48b4abde26998e3c19
-
SHA256
c8093bc01e0d6ee9e18ac25093026d9b7e63a38f632933aa8b67def84c7d3663
-
SHA512
7436829c903a8bb13ca37c76a13e25eed6cda3bff6f4f6a1bb119810f2f09134babcda5a9706642de347ba52a9ea585ac1853fda9fdd697c0c4d275ac884b3fe
-
SSDEEP
6144:wKE9YQ/GvH3NRVsGorIPRAoO4B5dKwFUGjjAaSepQEDpeHD:wKE99/GvH6G7Pe1Uoy0aSeCG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d42df8be580224ca8a1ec60b30375020
Files
-
d42df8be580224ca8a1ec60b30375020.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: 249KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ