Static task
static1
Behavioral task
behavioral1
Sample
d73f2071e054f89cbc06588fc494587d.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d73f2071e054f89cbc06588fc494587d.exe
Resource
win10v2004-20240226-en
General
-
Target
d73f2071e054f89cbc06588fc494587d
-
Size
58KB
-
MD5
d73f2071e054f89cbc06588fc494587d
-
SHA1
5c7608e3530b3787691dd80befe4032c2e6b5048
-
SHA256
45d75c6da1996d1790e4132e926c4e0d41a175c676f7332209e0146457abcb59
-
SHA512
1134e9548513a6e4090d39647433ec23deab90129c95e7bac2d82b7139fa021fd3ecea3257ccfb9d715ffa01cb7ee335797089d1be0a6f778f3c902b1451c47a
-
SSDEEP
1536:GPT2hWw/10hwUfkV+3SnGZbgZ1S247YWVl7pefSI30y:GPThwygIGYbgZ1S5MI7pez3z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d73f2071e054f89cbc06588fc494587d
Files
-
d73f2071e054f89cbc06588fc494587d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.nsp0 Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 52KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE