Static task
static1
Behavioral task
behavioral1
Sample
de86dfad6e0b501b7f6c052d47394719.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de86dfad6e0b501b7f6c052d47394719.exe
Resource
win10v2004-20240319-en
General
-
Target
de86dfad6e0b501b7f6c052d47394719
-
Size
11KB
-
MD5
de86dfad6e0b501b7f6c052d47394719
-
SHA1
45af7116ea4e2d8fee6efe9eff612962dd3b2882
-
SHA256
f013c5a5ee6b5ec05ae2d26703f51e30e792dfc95c28b5a4a25dbb847887edc2
-
SHA512
17b2195137ce78bd93701a7670fbd32255d99feacbcf1fdcae14b606cb22e6802b8f575473842c178bab9420c3a071a0ced512de10d751054cb074541a5cc172
-
SSDEEP
192:ekF+4VADgkA4a19V+JTl6FedLOPbVRERFlP8qVgPDhviHRdTG4zs4Jhb:TFosktaXVA6IdLODViRbkqCDw5Gysy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de86dfad6e0b501b7f6c052d47394719
Files
-
de86dfad6e0b501b7f6c052d47394719.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.nsp0 Size: - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE