Static task
static1
Behavioral task
behavioral1
Sample
472636cf017993d742714e067211861f57cbae3033846f60cae0ec26173cac36.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
472636cf017993d742714e067211861f57cbae3033846f60cae0ec26173cac36.exe
Resource
win10v2004-20240412-en
General
-
Target
472636cf017993d742714e067211861f57cbae3033846f60cae0ec26173cac36
-
Size
14KB
-
MD5
a79ea08575ea6a2913579cb387596f94
-
SHA1
ae770f92a2953f448b8b5a21819bdfdb633673d6
-
SHA256
472636cf017993d742714e067211861f57cbae3033846f60cae0ec26173cac36
-
SHA512
5973bc1bbb9ccccd9b87da47fb412a838c77cb7ac1ab17aa7f81acea934de7a5392eeaef7b4c39d17228fd79d0314c4f8b1d920ec76cea86312a1458909f0ae8
-
SSDEEP
192:4hAm3LQ6w4zbHtxpBvhYZYZYZYZYOTTTTTTTTTTv5QvcF40qDE045HQOvvvv:4yJ65bDpUGGGGhvcSDDE045Htvvvv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 472636cf017993d742714e067211861f57cbae3033846f60cae0ec26173cac36
Files
-
472636cf017993d742714e067211861f57cbae3033846f60cae0ec26173cac36.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ