Static task
static1
Behavioral task
behavioral1
Sample
de4c498684c775fa04e2a2187450f0ca.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de4c498684c775fa04e2a2187450f0ca.exe
Resource
win10v2004-20240319-en
General
-
Target
de4c498684c775fa04e2a2187450f0ca
-
Size
283KB
-
MD5
de4c498684c775fa04e2a2187450f0ca
-
SHA1
a6299c242e7528011fe568779b2cea1422878192
-
SHA256
dc872a17fd352dd7a94b7613150ffa39cc6dc9193f745fd989ff620d2c23915e
-
SHA512
5585c69cb5c94fd3d08311f39c13e91d3506255915d9d76274dd8810e993e49521485f8c8fa5bda945bfe21d59aa0e68948e13fe69520b1b56abf43d3f3e1f4c
-
SSDEEP
6144:aT4H6afiKExJqHOn/Pg9bN9j6lzuxA5cF1a65yULC6:aT4Htl7O/o/la6Mu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de4c498684c775fa04e2a2187450f0ca
Files
-
de4c498684c775fa04e2a2187450f0ca.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
. Size: 16.1MB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. Size: 4KB - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ