Static task
static1
Behavioral task
behavioral1
Sample
d4ba20478bffbdb513ae7936da6c6fe7de160a843ade6262ebf5816289c94fa2.exe
Resource
win7-20240220-en
General
-
Target
d4ba20478bffbdb513ae7936da6c6fe7de160a843ade6262ebf5816289c94fa2
-
Size
9.4MB
-
MD5
cb3318a2cf1b2a66dcc487605e90c860
-
SHA1
73d33f56b19ab639bd733202ab523d1148e47826
-
SHA256
d4ba20478bffbdb513ae7936da6c6fe7de160a843ade6262ebf5816289c94fa2
-
SHA512
e0405f7d62eb9c79d8d3e92ef597df0a6f9ce47f164a30db3081347e767706b3e271918c739babfefdc5d1ba038c87c0fec19be7a963fef0db573c258ed9d7dc
-
SSDEEP
98304:xYOXwnS4rVjx1LVNqvgqvggVshuA+Cga0E2YFGOud1XdhBiiMaLRW4o:mIG1eYqY4s7jFQikLto
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4ba20478bffbdb513ae7936da6c6fe7de160a843ade6262ebf5816289c94fa2
Files
-
d4ba20478bffbdb513ae7936da6c6fe7de160a843ade6262ebf5816289c94fa2.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.Upack Size: 49B - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 41KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE