Static task
static1
Behavioral task
behavioral1
Sample
edc4d8e807bd31ef7285bba5eda20d79.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
edc4d8e807bd31ef7285bba5eda20d79.exe
Resource
win10v2004-20240412-en
General
-
Target
edc4d8e807bd31ef7285bba5eda20d79.exe
-
Size
65KB
-
MD5
edc4d8e807bd31ef7285bba5eda20d79
-
SHA1
bd6bb355f6eeb5b609d1b48c01ae46fcd23c3828
-
SHA256
97720cf603ceaae6ca0face3c29e923ba44319b9f5816f93ad95728e93cc0e47
-
SHA512
8749a9eff4e93d1ef632a5d7502a41dd8916477f8049858bdfc00e9efc39a62ba99178989e5587dacaf688f1f05da89c0a47af152d2be3f0a9ba0d2df43ca720
-
SSDEEP
1536:NDj2d6rnJbJnJBSX1nV1b1N1Il1k1YFI1x1J1MuEqx517Q/1T1Jzct01Nsqnl1RT:FlnnJBSX1nV1b1N1Il1k1YFI1x1J1Mug
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource edc4d8e807bd31ef7285bba5eda20d79.exe
Files
-
edc4d8e807bd31ef7285bba5eda20d79.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE