Static task
static1
Behavioral task
behavioral1
Sample
256a30d6b79d75e5b1b0d8d42f6bf1cb04a9dfd44cc3273ddf272fd89486748c.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
256a30d6b79d75e5b1b0d8d42f6bf1cb04a9dfd44cc3273ddf272fd89486748c.exe
Resource
win10v2004-20240419-en
General
-
Target
256a30d6b79d75e5b1b0d8d42f6bf1cb04a9dfd44cc3273ddf272fd89486748c
-
Size
94KB
-
MD5
b3efbde134a1e2997423dca86f8cd52d
-
SHA1
93ee1aa7e0caefb39c7161885fd94b59c84ffd25
-
SHA256
256a30d6b79d75e5b1b0d8d42f6bf1cb04a9dfd44cc3273ddf272fd89486748c
-
SHA512
426046c7cfa1986a047c991935269a19e48a72e6e2e32cb3732042ff9912d4662f5d17a3f9f566c2cbc6bb2f05e70138a9773d14f03a6bc3d1c5aa55d9a29941
-
SSDEEP
1536:YAowfUJFgjT284U+w2EwRz6OlvaeEpIao/6NXznCCh+61CXCCCC9yttattvtHtg9:YAowyFgjTiUkEwt6OlvaeEpIao/6NDnB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 256a30d6b79d75e5b1b0d8d42f6bf1cb04a9dfd44cc3273ddf272fd89486748c
Files
-
256a30d6b79d75e5b1b0d8d42f6bf1cb04a9dfd44cc3273ddf272fd89486748c.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.nsp0 Size: 33KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE