Static task
static1
Behavioral task
behavioral1
Sample
de6d8ee336841b7d6dda97cfbdedf3fa.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
de6d8ee336841b7d6dda97cfbdedf3fa.exe
Resource
win10v2004-20240319-en
General
-
Target
de6d8ee336841b7d6dda97cfbdedf3fa
-
Size
687KB
-
MD5
de6d8ee336841b7d6dda97cfbdedf3fa
-
SHA1
e2396ade747c9263f866d624adce0ba82294f195
-
SHA256
a90bd41e327268f0e1b3944d3cbeab675e892be5379af9c64312c5f08db79369
-
SHA512
b2f3473755e55377e2383925022bdc2816dc04d8b9f500d455d18bbcaf39ccdca393ecbfdb6e7181a99d17f367fa65e5e6e40c3fe02dd57899c55059eff1de55
-
SSDEEP
6144:XkipKYd2Q+emg9pThpkKidWCWSVFBqmniwIU+4i9NCtke+KNIm9w8jf88PE+:vpKTQ+emCLi5WSHBn2Ih+KNbe68E
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6d8ee336841b7d6dda97cfbdedf3fa
Files
-
de6d8ee336841b7d6dda97cfbdedf3fa.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 418KB - Virtual size: 417KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 267KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ