Static task
static1
Behavioral task
behavioral1
Sample
de72068e017178f0037078f6b8d25011.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de72068e017178f0037078f6b8d25011.exe
Resource
win10v2004-20240226-en
General
-
Target
de72068e017178f0037078f6b8d25011
-
Size
2KB
-
MD5
de72068e017178f0037078f6b8d25011
-
SHA1
352e99f55a55c4912ae16697b9af1ef68ddaf85d
-
SHA256
c40d993be62e103f15069c884de9e87e9e3236e8826499756f00eefe84b693fe
-
SHA512
c42a87727bcd1234bfcddd8450a13ad3b65a711bc6b71cfe3a3f78850b156efa94ab387dde9c87b6fe5c390bfd07fec82bd6d258c2c230002d8b4afd40064567
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de72068e017178f0037078f6b8d25011
Files
-
de72068e017178f0037078f6b8d25011.exe windows:4 windows x86 arch:x86
5ef04e2997c6a81265e6f121f819cc7c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetProcAddress
LoadLibraryA
CreateProcessA
Sections
.text Size: 512B - Virtual size: 258B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 160B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE