GetPluginDirectory
Static task
static1
Behavioral task
behavioral1
Sample
d7344e7f1142142f0a7d1cd9508d1eed.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
d7344e7f1142142f0a7d1cd9508d1eed.exe
Resource
win10v2004-20231215-en
General
-
Target
d7344e7f1142142f0a7d1cd9508d1eed
-
Size
1.9MB
-
MD5
d7344e7f1142142f0a7d1cd9508d1eed
-
SHA1
e56c17bee5ecdb9c570d3ed62f54878ae247f74e
-
SHA256
e39d4161be46fbe48d56b6b6179fdba595b857483875eda10e14838e6de070a2
-
SHA512
4c824cec63c2696f3968440306b54b82578eb7893a5bd89f8738629d15c8b1ff68c3f1fbc77b93223516bd972cc3c2e3ac6b9d1a43056b64529638d3d1aae414
-
SSDEEP
49152:L3G08oRrEuc1i7x+85bVDj86FQ2T4VdkguM7XIu7E:LW0pRc1iVfbei7bMj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7344e7f1142142f0a7d1cd9508d1eed
Files
-
d7344e7f1142142f0a7d1cd9508d1eed.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 17KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 558KB - Virtual size: 633KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������� Size: 1.3MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE