Static task
static1
Behavioral task
behavioral1
Sample
de9884ade848054684e9b3aabeceade8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de9884ade848054684e9b3aabeceade8.exe
Resource
win10v2004-20240226-en
General
-
Target
de9884ade848054684e9b3aabeceade8
-
Size
16KB
-
MD5
de9884ade848054684e9b3aabeceade8
-
SHA1
2104b98ae0ea166f242d32f73cae7db508c17797
-
SHA256
c3e4a5b855e4bb0207fc73e080b74a7ce1412e6aa62f20ec6fc944b0b1611e72
-
SHA512
6ed860f00368bf12f6b3b6c1cebe5c02ceaed7882effbfc5e2899f4246f88d7339790609a6bf026052fc8703a89c5263bcfc36c22872d30aa9dbbaf5700f8292
-
SSDEEP
384:pBksnDO19JkCl8fkg4EcuvQtUfgDf2ABf6:pGsDk9CxkgougNJ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de9884ade848054684e9b3aabeceade8
Files
-
de9884ade848054684e9b3aabeceade8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE