Static task
static1
Behavioral task
behavioral1
Sample
ef63c625a8dbcac2e328e1052516d38f0ed645df08ff0ba21ca00752d1f591ce.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ef63c625a8dbcac2e328e1052516d38f0ed645df08ff0ba21ca00752d1f591ce.exe
Resource
win10v2004-20240419-en
General
-
Target
ef63c625a8dbcac2e328e1052516d38f0ed645df08ff0ba21ca00752d1f591ce
-
Size
14KB
-
MD5
47c9968ceb765be2bcec0be33c1f1dbb
-
SHA1
9a0599a0af92e3bacc71d7669e05e0e605d79cf5
-
SHA256
ef63c625a8dbcac2e328e1052516d38f0ed645df08ff0ba21ca00752d1f591ce
-
SHA512
ee8b1242d23b71853f20022b94f11637f16fda51b45c143f9973819da90a049c94e37a7af13130d014fa282b006c7cf3eaabc58e28c8744383f683007d33cde6
-
SSDEEP
384:n/CXXuYguyBjN+kAPkACkQ5X4KgDE045Hbllll:/CnuYguypAPkACT5X4bA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef63c625a8dbcac2e328e1052516d38f0ed645df08ff0ba21ca00752d1f591ce
Files
-
ef63c625a8dbcac2e328e1052516d38f0ed645df08ff0ba21ca00752d1f591ce.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ