Static task
static1
Behavioral task
behavioral1
Sample
630ffe48a386827b674a2603c4309c5c.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
630ffe48a386827b674a2603c4309c5c.exe
Resource
win10v2004-20240226-en
General
-
Target
630ffe48a386827b674a2603c4309c5c
-
Size
48KB
-
MD5
630ffe48a386827b674a2603c4309c5c
-
SHA1
6ef7f21e8c1243fba6a10fc4fb920b0a44f71b59
-
SHA256
f445843b2344e2ca97a4a6f32010d2be200e28e91494867dea2ef1651bbb96cf
-
SHA512
aac4652c227eea283430d091f8edbd1edd5e5f79164f10d14ad3aa672bf23063237930132faf9392a8db08e375b93f3e584283121695fa68244a3c6279f8644d
-
SSDEEP
768:vDoYlGcwUk8yQ0rYLAK1WjWoWuWV7YNAZMoimyJrS4qPds36ikSJrC0oEulBKw:icdlMrYL/1iRVYUroNyJWZi3JuEu+w
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 630ffe48a386827b674a2603c4309c5c
Files
-
630ffe48a386827b674a2603c4309c5c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
pUNKVNsp Size: - Virtual size: 56KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UzBUtnck Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE