Static task
static1
Behavioral task
behavioral1
Sample
d4eab135e359ed580ab6668c555952a8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d4eab135e359ed580ab6668c555952a8.exe
Resource
win10v2004-20240226-en
General
-
Target
d4eab135e359ed580ab6668c555952a8
-
Size
305KB
-
MD5
d4eab135e359ed580ab6668c555952a8
-
SHA1
d570dcf4782cf4dc8c553588cdedbeeb454a1408
-
SHA256
06844f325a81e1ead0cf6495d59b4dfdc3fd2db6bf59cd3fc53885147449e800
-
SHA512
a4299bdb0b4bc73411134396c7590939b03e7cf94c119e5653a6ae39c8f4f36386f176db27641f2f511328ee26a8d2d89b8209f70d5c688723036c7393980507
-
SSDEEP
6144:61OQWug6Pni4o5uIfUQaU/P+ZMy4EnVW5GJZ2tNYLj8MfsoXuKgG:oOdCa+99VzYKj86s7Kv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4eab135e359ed580ab6668c555952a8
Files
-
d4eab135e359ed580ab6668c555952a8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 788KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 165KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 139KB - Virtual size: 360KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE