Static task
static1
Behavioral task
behavioral1
Sample
d78412cbd988bc67f95b152d9c586f1f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d78412cbd988bc67f95b152d9c586f1f.exe
Resource
win10v2004-20231215-en
General
-
Target
d78412cbd988bc67f95b152d9c586f1f
-
Size
18KB
-
MD5
d78412cbd988bc67f95b152d9c586f1f
-
SHA1
354430ace7e0cd89d1c2c975ea472ca1498956e3
-
SHA256
a5a2bef5199ccfe07222c1cfa89f3e7da6134a471f9da5e471060af49d8d2337
-
SHA512
59f9eb71e632a41c5e2633601a3a33a0d97c8ab769cef6029ea527577716127f4f932584bb3e8a30ca3c00c5dd58418c02f9c54e0ffff2ffa9efadd50e0cf5cb
-
SSDEEP
384:LkgW+poUxC2r5xK2CC5UbSWaYwAvSCb7rWtZtctZt7tst7tjA+0qU+l50H:BZ2o35CC5U+WpbvrWtZtctZt7tst7t0J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d78412cbd988bc67f95b152d9c586f1f
Files
-
d78412cbd988bc67f95b152d9c586f1f.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
����<Q�+ Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
�M�0�e� Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
l�}��N.� Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ