Static task
static1
Behavioral task
behavioral1
Sample
d6371ce2f146f54e2f54b7f4f7e7c349.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d6371ce2f146f54e2f54b7f4f7e7c349.exe
Resource
win10v2004-20240226-en
General
-
Target
d6371ce2f146f54e2f54b7f4f7e7c349
-
Size
82KB
-
MD5
d6371ce2f146f54e2f54b7f4f7e7c349
-
SHA1
728a3714d2dcfb8875c13822f52599837fdb4679
-
SHA256
f926ba83b07b3d56ba3b55321a5a61b33fb8e9308318a6b4d926d67e1a0034d8
-
SHA512
ad5a3201ed10fc522ecfb6e393d8a6a4f0463a6c987ec0eba8ec99f579e708f10ff16bd255ebbc54eb6ce2d47bd3712641c24f29cdd2dc40149e8978ffc1a5bb
-
SSDEEP
1536:cy0LgiH5g0Zk0J+M7Yb58F51AhnzaNrO1kLABpgCxQbjZ7tBaWhKfZYLMnIGg:cyufH5LkU+M7YbqF51Ahz+rikEjEjZ7T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6371ce2f146f54e2f54b7f4f7e7c349
Files
-
d6371ce2f146f54e2f54b7f4f7e7c349.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 90KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ