Static task
static1
Behavioral task
behavioral1
Sample
d72461a4a6b48c978984cee9133d8289.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d72461a4a6b48c978984cee9133d8289.exe
Resource
win10v2004-20240226-en
General
-
Target
d72461a4a6b48c978984cee9133d8289
-
Size
6KB
-
MD5
d72461a4a6b48c978984cee9133d8289
-
SHA1
0bff0400270084ffd35350028c1250b5b328d781
-
SHA256
c60d0afbc8267ec5c413200a91420dec0eec024d29da6dbab2218d1e83c9ae94
-
SHA512
b800e7ee9f0695a8f13ea40acf77c0a48f97396edddef475395fa3f7e8a616699ad7c37a2113e74e3049c2d79e9f4dbe3334188902abf7f10f72e6e63b3f348c
-
SSDEEP
96:RqfL/Jp0/J4RlhLXV7DMyuIkfrcNRi64zwKvdqtwdYKpJ7DEJkpddsHM63W:UjJIJaxdw9uRi5kmdYiBDqR7G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72461a4a6b48c978984cee9133d8289
Files
-
d72461a4a6b48c978984cee9133d8289.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 184KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vtext Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gda Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE