Static task
static1
Behavioral task
behavioral1
Sample
de11d8efee86ec99b8f67bb65d1e863c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de11d8efee86ec99b8f67bb65d1e863c.exe
Resource
win10v2004-20240319-en
General
-
Target
de11d8efee86ec99b8f67bb65d1e863c
-
Size
512KB
-
MD5
de11d8efee86ec99b8f67bb65d1e863c
-
SHA1
c9adf0303eca545636fbced8de2a027bcd40e417
-
SHA256
edfe595a475fd764115cdffd8ffc572e6846ee7ef5c4d0121a82229ca1a1b336
-
SHA512
366cd84568d48e9dcd718b6f9262748c1a3125922fcef4a89f2d205bd8741f639969c9aff0bb63fe335c5d6a0aa6e3cbb0d5c087e70265b63bee1446305fe60e
-
SSDEEP
12288:oySyVD7v5J2WbeE2NNRh6Mm/L/+foM/9xmpxQdWesGgAbJw2re3Lx:pJvbevNR0Mm/st9xmp+RZPbSXx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de11d8efee86ec99b8f67bb65d1e863c
Files
-
de11d8efee86ec99b8f67bb65d1e863c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 804KB - Virtual size: 804KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 377B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE