Static task
static1
Behavioral task
behavioral1
Sample
89de61ea86b7a2d11cd9936005ce43b82f2c82deaea84d68c278a6c715c9af85.exe
Resource
win7-20240220-en
General
-
Target
89de61ea86b7a2d11cd9936005ce43b82f2c82deaea84d68c278a6c715c9af85
-
Size
285KB
-
MD5
aea4e4fe9ceeb83c8a15124829eaecf2
-
SHA1
3df97a6932a16008a6e5b37b376497cb7a313d05
-
SHA256
89de61ea86b7a2d11cd9936005ce43b82f2c82deaea84d68c278a6c715c9af85
-
SHA512
d721a3a75699d97f365163c791d627e8638bb131abaa6c51f17256e28ebe043d766e96013e526319dc54464c833ebd7d440fc48157da6f883620e7868ff77337
-
SSDEEP
6144:m+aMEMTi0+lfh+L5qe9T5q4GAFzWTBPMmC1UC6fOaU:m+aMEMTi0uhMqe9ts2zWTpMmCG7W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 89de61ea86b7a2d11cd9936005ce43b82f2c82deaea84d68c278a6c715c9af85
Files
-
89de61ea86b7a2d11cd9936005ce43b82f2c82deaea84d68c278a6c715c9af85.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE