Static task
static1
Behavioral task
behavioral1
Sample
c94788a30dc7294a32c84654063e1282b544d70cc44a44acbc8d36c647dc0f5c.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
c94788a30dc7294a32c84654063e1282b544d70cc44a44acbc8d36c647dc0f5c.exe
Resource
win10v2004-20240226-en
General
-
Target
c94788a30dc7294a32c84654063e1282b544d70cc44a44acbc8d36c647dc0f5c
-
Size
2.3MB
-
MD5
71b8cf6dcca514efdb6a4407d5ebe820
-
SHA1
ecdcbc69b70dec45d09590a6c42a8c6a9fc674b7
-
SHA256
c94788a30dc7294a32c84654063e1282b544d70cc44a44acbc8d36c647dc0f5c
-
SHA512
27cbcd423c274d6dd9f408116c8d23115e417b759c40923f76d1cc0a8aa1f5624d785edfa884c6ca7b00ecedcba021f97eece60a68db1893af7032173e0710a7
-
SSDEEP
49152:cMDKJXjKVEwUH7rV7raziTECtKaXQqKCgK1S3hYbOz:cMm5jKVE3brV3azSRtHhS6O
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c94788a30dc7294a32c84654063e1282b544d70cc44a44acbc8d36c647dc0f5c
Files
-
c94788a30dc7294a32c84654063e1282b544d70cc44a44acbc8d36c647dc0f5c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
PCGUARD Size: 512B - Virtual size: 5.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
PCGUARD Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE