Static task
static1
Behavioral task
behavioral1
Sample
790b1ea8b994c1af7fb3c74561c66d65b3ec4fa16eb3e69893994bd1cac0abe1.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
790b1ea8b994c1af7fb3c74561c66d65b3ec4fa16eb3e69893994bd1cac0abe1.exe
Resource
win10v2004-20231215-en
General
-
Target
790b1ea8b994c1af7fb3c74561c66d65b3ec4fa16eb3e69893994bd1cac0abe1
-
Size
486KB
-
MD5
4d3e24e05ab5d820b0b821cf1fcc8217
-
SHA1
cb1948ab6043069009b0dc3b95f986d8e683939b
-
SHA256
790b1ea8b994c1af7fb3c74561c66d65b3ec4fa16eb3e69893994bd1cac0abe1
-
SHA512
23075bbd6e9aa9ce10344aed289a5660268ba08c705d86e1a2c360b69f552e69faf59454ba7d5033ffd73c67b83ccdf600b6d2be124cb18404d484b551c3c221
-
SSDEEP
12288:LDlc87eqqV5e+wBV6O+aUn7BwPw+osMQ46f8Xim5:LDSqqHeVBx3U7uY+hO6fsim5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 790b1ea8b994c1af7fb3c74561c66d65b3ec4fa16eb3e69893994bd1cac0abe1
Files
-
790b1ea8b994c1af7fb3c74561c66d65b3ec4fa16eb3e69893994bd1cac0abe1.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 464B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ