Static task
static1
Behavioral task
behavioral1
Sample
f94d849ffca583c9a28174f09f2f1de384b54da4f64397fa1a38b96a59982f6e.exe
Resource
win7-20240221-en
General
-
Target
f94d849ffca583c9a28174f09f2f1de384b54da4f64397fa1a38b96a59982f6e
-
Size
54KB
-
MD5
63ac1de2b172696c0b9496aa933a5006
-
SHA1
a6c123427c5744691fd77e3601e0ad42d995f036
-
SHA256
f94d849ffca583c9a28174f09f2f1de384b54da4f64397fa1a38b96a59982f6e
-
SHA512
64c3f90a55209b1763cd1445501b356d867ab6413be43c8699d684eb8317e1fc0ce540f2252f51c3501f0cf550a9dee661a7c90c3fc4c78f6c6583e6f0f20a2b
-
SSDEEP
1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFy:ymb3NkkiQ3mdBjFIFy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f94d849ffca583c9a28174f09f2f1de384b54da4f64397fa1a38b96a59982f6e
Files
-
f94d849ffca583c9a28174f09f2f1de384b54da4f64397fa1a38b96a59982f6e.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ