Static task
static1
Behavioral task
behavioral1
Sample
ed78feced8766e7cac2be571d74fcc44c85e169aad0161817c1ca4ec796413da.exe
Resource
win7-20240221-en
General
-
Target
ed78feced8766e7cac2be571d74fcc44c85e169aad0161817c1ca4ec796413da
-
Size
666KB
-
MD5
d1cb39de85818044edaaf70871e3cb81
-
SHA1
3184e368896382c94a59a35c40e7a3859f6675a9
-
SHA256
ed78feced8766e7cac2be571d74fcc44c85e169aad0161817c1ca4ec796413da
-
SHA512
4486502f3cbbe1b79941a091bb2c39ba11f223aab443fa0050c9c715046819fdc0d538f2fb81da376ea1d42c77290dd25613be20dfb816255f0ff0d72cab2e16
-
SSDEEP
6144:m+aX3rX1cC9LRU0ySj14WH+JPb7uL8zRMnJjNhAp7SO8zRMnJjNhAp7S8FRcdEKw:m+arF9PFlTz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed78feced8766e7cac2be571d74fcc44c85e169aad0161817c1ca4ec796413da
Files
-
ed78feced8766e7cac2be571d74fcc44c85e169aad0161817c1ca4ec796413da.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE