Static task
static1
Behavioral task
behavioral1
Sample
a435e44f9777c995b6907962ee3891a9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a435e44f9777c995b6907962ee3891a9.exe
Resource
win10v2004-20240226-en
General
-
Target
a435e44f9777c995b6907962ee3891a9
-
Size
115KB
-
MD5
a435e44f9777c995b6907962ee3891a9
-
SHA1
2b35856b763defd26d7cd73c0f63ad94a841aa62
-
SHA256
379cec9847a0c8f48478a5c3176bd7f3c1d5d2a89bb96db6009a379a0c938513
-
SHA512
d8e2f1a69c07ca189eecbfa4848ab85fbb3b33a724bdd070dad651b9038a51be07f18b84931e68e26d4c6c69aafaa2ae9f6c1d4388b37c5fa666ad247af4102a
-
SSDEEP
3072:rBZDDKFc9tjDazmNcfbyxCdbrIR/SoQUP5u30KqTKr4:rBtz9bwQChrIooQUPoDqTKE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a435e44f9777c995b6907962ee3891a9
Files
-
a435e44f9777c995b6907962ee3891a9.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ