Static task
static1
Behavioral task
behavioral1
Sample
ef810df084b52d8a82e237be67986b045c7f769ea45f3e838feaf6a22c988690.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ef810df084b52d8a82e237be67986b045c7f769ea45f3e838feaf6a22c988690.exe
Resource
win10v2004-20240226-en
General
-
Target
ef810df084b52d8a82e237be67986b045c7f769ea45f3e838feaf6a22c988690
-
Size
75KB
-
MD5
437cd214cd8acf9f84a18bffdee5a35f
-
SHA1
41800e3fa758496bddbd35ab64abe1d5b743194f
-
SHA256
ef810df084b52d8a82e237be67986b045c7f769ea45f3e838feaf6a22c988690
-
SHA512
52c3d81f7d90d5418f6fa93f2c9f25538b496f6f2794b8df950a7909a38485ad62c6fba07c4b797a51fe5f980387f7238923930d69d297b2de677686415cedf8
-
SSDEEP
1536:Kx1Qja7luy6y0s4sqfkbnAKBOKofHfHTXQLzgvnzHPowYbvrjD/L7QPbg/Dr0T3v:aOjWuyt0ZsqsXOKofHfHTXQLzgvnzHP3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef810df084b52d8a82e237be67986b045c7f769ea45f3e838feaf6a22c988690
Files
-
ef810df084b52d8a82e237be67986b045c7f769ea45f3e838feaf6a22c988690.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
k80hretw Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
i85yvszq Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
68e4jpml Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: - Virtual size: 16KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE