Static task
static1
Behavioral task
behavioral1
Sample
cde05ef71face0a2bf35d80554a58cfd463bd19c31f5c1013b4ac110dff56a7d.exe
Resource
win7-20231129-en
General
-
Target
cde05ef71face0a2bf35d80554a58cfd463bd19c31f5c1013b4ac110dff56a7d
-
Size
200KB
-
MD5
e4777e975db8e4eb21c579c3fed15ed9
-
SHA1
e912968867961c142b752b2b95c8cb198c5e4532
-
SHA256
cde05ef71face0a2bf35d80554a58cfd463bd19c31f5c1013b4ac110dff56a7d
-
SHA512
1849c030ea9859f2c4495c0b32eac8bdb75ba7e24969670f9ddfdb88462de9f76334f9fe57a1ce8e7146d727c77056d5c7b94f1c8b22f06cc1d28685c7f255c3
-
SSDEEP
3072:ymb3NkkiQ3mdBjFIi/0RU6QeYQsm71vPmc51+GqekBJCvr6zJBUVv1Tu:n3C9BRIG0asYFm71m8+GdkB9Cv1i
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource cde05ef71face0a2bf35d80554a58cfd463bd19c31f5c1013b4ac110dff56a7d
Files
-
cde05ef71face0a2bf35d80554a58cfd463bd19c31f5c1013b4ac110dff56a7d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
petite Size: 274B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ