Static task
static1
Behavioral task
behavioral1
Sample
26ba7094fed42ed03485a44fc3ed27b55b33d64f883043c1806959f6ac04bb81.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
26ba7094fed42ed03485a44fc3ed27b55b33d64f883043c1806959f6ac04bb81.exe
Resource
win10v2004-20240319-en
General
-
Target
26ba7094fed42ed03485a44fc3ed27b55b33d64f883043c1806959f6ac04bb81
-
Size
14KB
-
MD5
0ffd74bb42a6bf298f97c75c62164f3c
-
SHA1
a196f31cb44c33caea666f062bb0b6f09dd6aacf
-
SHA256
26ba7094fed42ed03485a44fc3ed27b55b33d64f883043c1806959f6ac04bb81
-
SHA512
12c26926297c9df8476dd71f1f82ec7f4691b9abe5ea7608027ce3fb0e470b60e4ce109fd19662510d3fd178641e71f47a2c99f7e055ccd7bbc710b2d4fd0858
-
SSDEEP
384:6mpH/YBCJM2kWrsKgDE045Hmfefefefe:6mpH/Y6QWrsJA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26ba7094fed42ed03485a44fc3ed27b55b33d64f883043c1806959f6ac04bb81
Files
-
26ba7094fed42ed03485a44fc3ed27b55b33d64f883043c1806959f6ac04bb81.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ