Static task
static1
Behavioral task
behavioral1
Sample
efca9a87b58415b7bd7be90a26b25bb8105c5a00f236c488f5d67da54c208e87.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
efca9a87b58415b7bd7be90a26b25bb8105c5a00f236c488f5d67da54c208e87.exe
Resource
win10v2004-20240426-en
General
-
Target
efca9a87b58415b7bd7be90a26b25bb8105c5a00f236c488f5d67da54c208e87
-
Size
14KB
-
MD5
8e4a6016cd299e4440e049bfd022143d
-
SHA1
55efecd19c9d7e1aabf600b7889282e6836e587c
-
SHA256
efca9a87b58415b7bd7be90a26b25bb8105c5a00f236c488f5d67da54c208e87
-
SHA512
0cbecb2c2b5fb1bfd90fcdd3fc26d2d7a8696102a8cfee7ae809ffa48150af0d66daf32af550405f3b85adab31f9dd2d52b5c35cd8320775d0076ee8e9828cef
-
SSDEEP
384:KDBySueAXd3D35rpf3v25X1xmDE045HE:io7eAtzprd3vo12A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efca9a87b58415b7bd7be90a26b25bb8105c5a00f236c488f5d67da54c208e87
Files
-
efca9a87b58415b7bd7be90a26b25bb8105c5a00f236c488f5d67da54c208e87.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ