Static task
static1
Behavioral task
behavioral1
Sample
463241b5be4d623905cd90bad793bc32448843e40c307d3e5e1298683536dda8.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
463241b5be4d623905cd90bad793bc32448843e40c307d3e5e1298683536dda8.exe
Resource
win10v2004-20240508-en
General
-
Target
463241b5be4d623905cd90bad793bc32448843e40c307d3e5e1298683536dda8
-
Size
64KB
-
MD5
45ab1cd95ecf0448830871f7719468e8
-
SHA1
f478074a4a3d87ad663944bcf888818897239f25
-
SHA256
463241b5be4d623905cd90bad793bc32448843e40c307d3e5e1298683536dda8
-
SHA512
0875c10f79cae65b89acb904ccc14a7e5386ea51d1f96c1d964ecd1fffee950d05ee10e360043a0e7bba5c44cc4832578d4c91f87eaa825e7f795e805746192a
-
SSDEEP
768:N320V6LQDT4rN/u0rK1FY5iLolS/qmb/otEkk9U4pejA5sP3wJi80p1ijOi22p/a:U0DgrP+t9zkjAafNFi22LZXdZgQe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 463241b5be4d623905cd90bad793bc32448843e40c307d3e5e1298683536dda8
Files
-
463241b5be4d623905cd90bad793bc32448843e40c307d3e5e1298683536dda8.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ