Static task
static1
Behavioral task
behavioral1
Sample
d7809aff82e42bbd5e6bdeda22e16689.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7809aff82e42bbd5e6bdeda22e16689.exe
Resource
win10v2004-20240226-en
General
-
Target
d7809aff82e42bbd5e6bdeda22e16689
-
Size
214KB
-
MD5
d7809aff82e42bbd5e6bdeda22e16689
-
SHA1
4decf6bd462519b01ee7d3d5e8d4c46de32eeeb0
-
SHA256
7d92779c7274bd41351cbfe6f5a19d8ba50bd4b1fcc68b1341f485ddfca21874
-
SHA512
b59c9a7a4e3f72045f31b2ee6e49c96ee84077e0f4821abb09c06b545aee57f4737850e7a5d63683e79528ac7aed685242869a88c087a4551ae02993ceb252fe
-
SSDEEP
3072:8jZpN0U3L0lrsb8cg5EIdoKhgwVnI4YZF+EH/ckKAoZtoGcHnjJXxNDLgdLQI48h:6BcsbvgZdoWnwbHErAvdnVDsdch8Qw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7809aff82e42bbd5e6bdeda22e16689
Files
-
d7809aff82e42bbd5e6bdeda22e16689.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 97KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 11KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE