Static task
static1
Behavioral task
behavioral1
Sample
d89d8640a6718505c1f072685a8886791a0a629532b078818b6485d5b8d2cd51.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
d89d8640a6718505c1f072685a8886791a0a629532b078818b6485d5b8d2cd51.exe
Resource
win10v2004-20240226-en
General
-
Target
d89d8640a6718505c1f072685a8886791a0a629532b078818b6485d5b8d2cd51
-
Size
141KB
-
MD5
393ac12204519c696195de4687b89d3d
-
SHA1
b1877ea406a831e43b9a6f7afc3571cfb9ddfb33
-
SHA256
d89d8640a6718505c1f072685a8886791a0a629532b078818b6485d5b8d2cd51
-
SHA512
cdeb3101f62c5c7a991adcc95d38a9e2c962ea78af8897b025a9c6b1493661ec78fc59c9368b892e65bff85e1ce627a8b1636b1e63576af8e4a1c9e9fb9eec4b
-
SSDEEP
3072:2ftffjmNRGo9uT2cThB/eNHs98MQrp3iU0eJVpAcwM7u8K3laRxN:uVfjmNLuH/eNHYs3impA+xYk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d89d8640a6718505c1f072685a8886791a0a629532b078818b6485d5b8d2cd51
Files
-
d89d8640a6718505c1f072685a8886791a0a629532b078818b6485d5b8d2cd51.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE