Static task
static1
Behavioral task
behavioral1
Sample
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe
Resource
win10v2004-20240426-en
General
-
Target
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07
-
Size
14KB
-
MD5
3df63d9b161d60f5802d4ca8c91ed412
-
SHA1
535dbebe1f87806da63c9297ad0109fe7b7a8789
-
SHA256
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07
-
SHA512
b6796e570a93878bb70fc0d7477245be62b4b15dcd926d690d92fda8543616c007171c7a34e15f7fb67e2ea54df6119bd5084c3ab3bd66472bd44d0de0e20413
-
SSDEEP
384:L8Q30MKdWX8HSHSHSHSHSHSHSHSHSHSHSHSHSHSHSHX5TJYtyYDE045H:Lv3WdWsHSHSHSHSHSHSHSHSHSHSHSHSC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07
Files
-
64da85b45733543c015a6a711f16ff8859a66ee2f51caf582129805660a24f07.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ