Static task
static1
Behavioral task
behavioral1
Sample
42792c438ee9eadbccbd61ebbe544ef8acb27ea8e7b9e23295692134c5da58de.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
42792c438ee9eadbccbd61ebbe544ef8acb27ea8e7b9e23295692134c5da58de.exe
Resource
win10v2004-20240412-en
General
-
Target
42792c438ee9eadbccbd61ebbe544ef8acb27ea8e7b9e23295692134c5da58de
-
Size
90KB
-
MD5
0b569703f5af309b4fa100f883d9cb41
-
SHA1
2f81ebfdb7e81020b7eb4f3a5b6bd5ca574b5ec9
-
SHA256
42792c438ee9eadbccbd61ebbe544ef8acb27ea8e7b9e23295692134c5da58de
-
SHA512
3d8e7c21999abe1b3589c343d436981ea1fb8d28c5d5980325bf98c2e22f09afc1c1361210083e29f5291ca7c3422dcca708d588cd1bb2dd69d09eb310c7f95b
-
SSDEEP
1536:mvDJABXVfqrRkbNqHBG/s6pJyXEXi3FW8TuwXBfOOQ/4BrGTI5Yxj:GJAryrCJCn6pJNKLBU/4kT0Yxj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42792c438ee9eadbccbd61ebbe544ef8acb27ea8e7b9e23295692134c5da58de
Files
-
42792c438ee9eadbccbd61ebbe544ef8acb27ea8e7b9e23295692134c5da58de.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ