Static task
static1
Behavioral task
behavioral1
Sample
d55c42a8e0e54b39239de5a6325fef62.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d55c42a8e0e54b39239de5a6325fef62.exe
Resource
win10v2004-20240226-en
General
-
Target
d55c42a8e0e54b39239de5a6325fef62
-
Size
915KB
-
MD5
d55c42a8e0e54b39239de5a6325fef62
-
SHA1
70d150aa02497a09c6217899cfe7b20000735286
-
SHA256
3e43605053b9adf694655399c2a21ac99b726744f0cdfaa83f34dc487f811f07
-
SHA512
7e7530a60cc2499a291e26edfd4599fa4c6a6eab0294d93e993c2c61cb87d65e06bb38b707fff35f54d7091bb6bb04f7f162f8ddf50d476f4c7aebe3bfd25611
-
SSDEEP
12288:5WUklLkEflG7/LqunTsyPEkcybaNAkKfbOSbxzJKvN8oehNRMMBw7sUquMhjOtyd:5WU467j1Ckcy2Ck46SbPKvzKRuP0mu6y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d55c42a8e0e54b39239de5a6325fef62
Files
-
d55c42a8e0e54b39239de5a6325fef62.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ