Static task
static1
Behavioral task
behavioral1
Sample
d789bd79bd5288d4e3dcc6dc79c01401.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d789bd79bd5288d4e3dcc6dc79c01401.exe
Resource
win10v2004-20240226-en
General
-
Target
d789bd79bd5288d4e3dcc6dc79c01401
-
Size
16KB
-
MD5
d789bd79bd5288d4e3dcc6dc79c01401
-
SHA1
0efa69a8b9d81886bc963597fc25483523972e73
-
SHA256
c18fe0303d27ecb310768ce3e2cfa07ed23cb7f143a984e3646704faf79a7ec7
-
SHA512
17de1592410022a4406c1b6f5314b02cc3aaf6c5332a07d382b2a767c6348e62f130a4b150a2b40f5d8076ba9f50b3147985840382dbaa69d668e033c4dc1d5e
-
SSDEEP
192:ng/rMkee5LLk0GXoMqvHt54bXa4k4BgfKAe7uHr//lnRhEnVarFBoLWIbqQhwRyy:g/rP5xGXofT6zKxsQhRhEnuKb4yy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d789bd79bd5288d4e3dcc6dc79c01401
Files
-
d789bd79bd5288d4e3dcc6dc79c01401.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
myex0 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myex1 Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
myex2 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE