Static task
static1
Behavioral task
behavioral1
Sample
d691f238a07b1b9fee9084ee4ca06a18.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d691f238a07b1b9fee9084ee4ca06a18.exe
Resource
win10v2004-20240226-en
General
-
Target
d691f238a07b1b9fee9084ee4ca06a18
-
Size
184KB
-
MD5
d691f238a07b1b9fee9084ee4ca06a18
-
SHA1
8fef11dcf379324c5a5c2b47c723927ffde96fd1
-
SHA256
2dd445c44cfc6127fe02687161134758fdf845140b6ab6f950da0aac1c06000d
-
SHA512
2d0ff40fba654e2299a6fe98abe78aa7604bb086f0aa2f8f627ee615074088c7bac3a9f45be689d8fc3d03f1d5e2d8f613f14095c5c5257dbe497b3503319c28
-
SSDEEP
3072:KB2romixTOAEAmj8MhcrC8AZEopMTxXldM7xqDCeZylPvpFv:KBKo7DEAzM6rC8L1ZPylPvpF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d691f238a07b1b9fee9084ee4ca06a18
Files
-
d691f238a07b1b9fee9084ee4ca06a18.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 172KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ