Static task
static1
Behavioral task
behavioral1
Sample
efd16007095fa1c9626bd52a628ad996de6fde8496de5bb674f6bfc844069043.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
efd16007095fa1c9626bd52a628ad996de6fde8496de5bb674f6bfc844069043.exe
Resource
win10v2004-20240419-en
General
-
Target
efd16007095fa1c9626bd52a628ad996de6fde8496de5bb674f6bfc844069043
-
Size
47KB
-
MD5
caa98d11f2713a35a8d43b82bfaa435c
-
SHA1
9b367ae2a180a4f0c04b88849a68e309c7481e89
-
SHA256
efd16007095fa1c9626bd52a628ad996de6fde8496de5bb674f6bfc844069043
-
SHA512
6abc75baf5e6929c078a3841f9a7dfcd949c4fa35e0c2482b16da142dd3ce2928a108048e6d2954557b6f8161f9b3abc0e512962e93c39c83ac679324da1059b
-
SSDEEP
768:6msqjsZAj7VFYoeco6iCCa4Hq18wo3BEsia:rHjhFYoe/6r7oqCdbV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efd16007095fa1c9626bd52a628ad996de6fde8496de5bb674f6bfc844069043
Files
-
efd16007095fa1c9626bd52a628ad996de6fde8496de5bb674f6bfc844069043.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 43KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
coderpub Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE