Static task
static1
Behavioral task
behavioral1
Sample
972b3649b80c1ae7cb4259c99da6cbd5f38af9affa6c2ea6424e3661bb6cf072.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
972b3649b80c1ae7cb4259c99da6cbd5f38af9affa6c2ea6424e3661bb6cf072.exe
Resource
win10v2004-20240412-en
General
-
Target
972b3649b80c1ae7cb4259c99da6cbd5f38af9affa6c2ea6424e3661bb6cf072
-
Size
14KB
-
MD5
f5dfe6c10b67bc3fd3714eff67838c83
-
SHA1
7c44010163ab2d008175852f04900953ec8d4260
-
SHA256
972b3649b80c1ae7cb4259c99da6cbd5f38af9affa6c2ea6424e3661bb6cf072
-
SHA512
62e34dc432296313fedef78a2cf8bbed319e207200c457017b3047cb6ff114334e51826827c0475021960194a9959d9f646478cb0f96703441d6cd593dea5c46
-
SSDEEP
384:WHftB+3leMlHkNEzJAfEaP0m3xbeXB2MGADE045H//JJ4:itB+3lPHkGFAfEaP33NGAaA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 972b3649b80c1ae7cb4259c99da6cbd5f38af9affa6c2ea6424e3661bb6cf072
Files
-
972b3649b80c1ae7cb4259c99da6cbd5f38af9affa6c2ea6424e3661bb6cf072.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ