Static task
static1
Behavioral task
behavioral1
Sample
de1b2c4901000a91c617c8a4b57fec93.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
de1b2c4901000a91c617c8a4b57fec93.exe
Resource
win10v2004-20240226-en
General
-
Target
de1b2c4901000a91c617c8a4b57fec93
-
Size
761KB
-
MD5
de1b2c4901000a91c617c8a4b57fec93
-
SHA1
fc2e0282e77fb85cf357a7c862c3db243fce2988
-
SHA256
fc157e1c30503a82bbe6aafefa3d46654b07bc405a92b981001f9bcd359a0daf
-
SHA512
b8c294ef1699b3d868de8dc5192ffd34dd8927ef8351b4e9461da6f77638141c84bf68e29a3bbfa548dbbaf772deeadb8f2945d2771d4ab6ec845a62f7060b6e
-
SSDEEP
6144:UZfec9EbXDk6RkNKME2EBE2Ernmy+g4OuHObE2EBE2Ernmy+g4OuHObE2EBE2Erx:UZWtI6RkUMr+O2Mr+O2Mr3q+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de1b2c4901000a91c617c8a4b57fec93
Files
-
de1b2c4901000a91c617c8a4b57fec93.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ