Static task
static1
Behavioral task
behavioral1
Sample
511030f8027ab9471341e42dba6063a3912ef7d61cc6bb698b62a8c9c9987a44.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
511030f8027ab9471341e42dba6063a3912ef7d61cc6bb698b62a8c9c9987a44.exe
Resource
win10v2004-20240426-en
General
-
Target
511030f8027ab9471341e42dba6063a3912ef7d61cc6bb698b62a8c9c9987a44
-
Size
14KB
-
MD5
1c4c8ec7987196c14764c4ffc3a945d4
-
SHA1
4440c694daee802358a1f26f2e1025d8c5051e2e
-
SHA256
511030f8027ab9471341e42dba6063a3912ef7d61cc6bb698b62a8c9c9987a44
-
SHA512
dbe4c52bb844fa3ad58701528c5ced2a25be0997f837b2921c0153b8432eaf6302f8dc56b461d43043849a884e9994c9c38b71a3141c2f83f25a45adb4d24afc
-
SSDEEP
384:xV38TFS6b2FcMOo5P/+knGmZNc6H0Nu/DE045H:XsTFSFOoDsF0A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 511030f8027ab9471341e42dba6063a3912ef7d61cc6bb698b62a8c9c9987a44
Files
-
511030f8027ab9471341e42dba6063a3912ef7d61cc6bb698b62a8c9c9987a44.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ