Static task
static1
Behavioral task
behavioral1
Sample
d64f8f5e029462547507236392ce7582.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d64f8f5e029462547507236392ce7582.exe
Resource
win10v2004-20240226-en
General
-
Target
d64f8f5e029462547507236392ce7582
-
Size
385KB
-
MD5
d64f8f5e029462547507236392ce7582
-
SHA1
79632b2a10f01d7c2a570275afe256ab4f851814
-
SHA256
c6d470be2019a958b420520e4bc83a4c91ff4fe786d58af5a2b75c8b20c43fe0
-
SHA512
55feba93d863a57c7ca1a7ad5b4028214e85a5196b0f3f247e7c6639a5901a4237e3ada0c38ff61318f42a91d2875b6f1d0d34d15940589e2ee4bd684d04d984
-
SSDEEP
12288:cx02eNBnlo/ydMXbPqIa4cbpKVzt8/Ba6B:YvydMK4cbp2ztqa6B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d64f8f5e029462547507236392ce7582
Files
-
d64f8f5e029462547507236392ce7582.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ