Static task
static1
Behavioral task
behavioral1
Sample
836ab80ecf283ed8cdfe45f678c00bb01735050fd0822170ee10c6d3332bbede.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
836ab80ecf283ed8cdfe45f678c00bb01735050fd0822170ee10c6d3332bbede.exe
Resource
win10v2004-20240226-en
General
-
Target
836ab80ecf283ed8cdfe45f678c00bb01735050fd0822170ee10c6d3332bbede
-
Size
14KB
-
MD5
e6919d1b61960b23a3ce9e2084f56e5e
-
SHA1
8a448b2afaa63f8fde36afdadc8f9ef5f522a334
-
SHA256
836ab80ecf283ed8cdfe45f678c00bb01735050fd0822170ee10c6d3332bbede
-
SHA512
e69daeb862891ea45cf224f3676d3ee294c93e8829b4392974380ba3e461729b926bde34c91e860156cfc7a3b4bd8cd781a179f4a89111b20291b4b6b78ffc51
-
SSDEEP
384:UV9bMrCb2LjlNmzojGTOk1t5/xDE045H:UDL0MUj0TA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 836ab80ecf283ed8cdfe45f678c00bb01735050fd0822170ee10c6d3332bbede
Files
-
836ab80ecf283ed8cdfe45f678c00bb01735050fd0822170ee10c6d3332bbede.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ