Static task
static1
Behavioral task
behavioral1
Sample
d613f0eae82abcb554d2530b1d762938.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d613f0eae82abcb554d2530b1d762938.exe
Resource
win10v2004-20240226-en
General
-
Target
d613f0eae82abcb554d2530b1d762938
-
Size
834KB
-
MD5
d613f0eae82abcb554d2530b1d762938
-
SHA1
1484c9752ac467dfc1905c8d5ed47d1bed1a1910
-
SHA256
69dac770728f4695586523657e8dea7f708fe1888eb7ca6650a37f25d49a5f16
-
SHA512
458892c3b93594370db4e5dfec49bc21e9aa10e370fe267dfe6e4809dd23a767bcb9ecc3a3e5b664000ebe5e789432f82719a5ca14bd49213be71852e2a07ed2
-
SSDEEP
12288:j9Z/CIAqABLv+Iy9VnmMpCTY6w4sLPpv5RMGOwSq0VOF3Z4mxx0I/us3TD1CqT+e:jrCvqkyIy9AMpJLOVzOQmX0I/uMTxCeH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d613f0eae82abcb554d2530b1d762938
Files
-
d613f0eae82abcb554d2530b1d762938.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 512KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 518KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE