Static task
static1
Behavioral task
behavioral1
Sample
d7a3bc055bd4e0a7b29c129c96ec5c63.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d7a3bc055bd4e0a7b29c129c96ec5c63.exe
Resource
win10v2004-20240226-en
General
-
Target
d7a3bc055bd4e0a7b29c129c96ec5c63
-
Size
1.6MB
-
MD5
d7a3bc055bd4e0a7b29c129c96ec5c63
-
SHA1
ae54a37a0204859bb7f26535137ae33f73044299
-
SHA256
9b6be6f97f7aefe15e041b58c03835ce5d638d379d62485fcf3fb2d94aab2ce3
-
SHA512
e40121dd9f169efea2c4b03d2aef07b0627b6cd6636f9a2689f682717f04d059b5b2fa096eba27aa38adb4cc70d4636e9c38af73b0ce0108f38eda4db2824d1a
-
SSDEEP
12288:oAIhiK58iYqgo1ZlQo9WQOm67QAL237vzbFYPS:o/YDYZlQo9WQOpQpY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7a3bc055bd4e0a7b29c129c96ec5c63
Files
-
d7a3bc055bd4e0a7b29c129c96ec5c63.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newIID Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE