Static task
static1
Behavioral task
behavioral1
Sample
f64a7c789a576e03b7d265e81ac05fbe26407275ad1dfe80ece439e1feb3ab92.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f64a7c789a576e03b7d265e81ac05fbe26407275ad1dfe80ece439e1feb3ab92.exe
Resource
win10v2004-20240426-en
General
-
Target
f64a7c789a576e03b7d265e81ac05fbe26407275ad1dfe80ece439e1feb3ab92
-
Size
14KB
-
MD5
971f2d263648a1287d59412207145fa2
-
SHA1
588f2bf36e6db99581b841e66412c44633f37add
-
SHA256
f64a7c789a576e03b7d265e81ac05fbe26407275ad1dfe80ece439e1feb3ab92
-
SHA512
381c601262c1b7255eb5e76128ec8d27d0093040e5164d59042d09092d9175c4d18a801b62552dc352e2a29b5eed965ae5dca373d914fbe8db07faa161a7fee6
-
SSDEEP
384:pVQA2MGHr2jHsniqWX+848dy7/kyDE045Hv:PQAfGL5niqx1H7soA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f64a7c789a576e03b7d265e81ac05fbe26407275ad1dfe80ece439e1feb3ab92
Files
-
f64a7c789a576e03b7d265e81ac05fbe26407275ad1dfe80ece439e1feb3ab92.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ