Static task
static1
Behavioral task
behavioral1
Sample
d93ab41168007d502e1d7755d5a10877969760806354f2d7b3a06768aafda457.exe
Resource
win7-20240419-en
General
-
Target
d93ab41168007d502e1d7755d5a10877969760806354f2d7b3a06768aafda457
-
Size
350KB
-
MD5
0a26614499c7b694e5a9ab1d8ae4a1e4
-
SHA1
8cab9fc12ffd5b738f4bc3aadeb119b81cff016d
-
SHA256
d93ab41168007d502e1d7755d5a10877969760806354f2d7b3a06768aafda457
-
SHA512
03505252d5681695bd89bf823b1d0c51c49c8c7ab2a73ae47e5cd33b1bd77a2f0ba6589f8d2804805f07c9bda9d72697f6890529eff9127f8436a6c990b5b38e
-
SSDEEP
6144:4cm7ImGddXvJuzyy/SfVFKpU/sien7NuOpo0HmtDKe0wKyKqiOfm8RCfDK4TrH0:+7TcBuGy/Sa+/sie0OpncKe/KFBOfmzc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d93ab41168007d502e1d7755d5a10877969760806354f2d7b3a06768aafda457
Files
-
d93ab41168007d502e1d7755d5a10877969760806354f2d7b3a06768aafda457.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.didat Size: 40KB - Virtual size: 152KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sxdata Size: 2KB - Virtual size: 3KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ