Static task
static1
Behavioral task
behavioral1
Sample
797b0fb38e7964c38f62ecdf2f475c70ad846189684dd8ecf868c71aad3b4296.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
797b0fb38e7964c38f62ecdf2f475c70ad846189684dd8ecf868c71aad3b4296.exe
Resource
win10v2004-20240426-en
General
-
Target
797b0fb38e7964c38f62ecdf2f475c70ad846189684dd8ecf868c71aad3b4296
-
Size
76KB
-
MD5
725812d3bea146418272fa03194fa490
-
SHA1
c1b7c17af5c0d6dfd18558d5ac02cb06bda017e5
-
SHA256
797b0fb38e7964c38f62ecdf2f475c70ad846189684dd8ecf868c71aad3b4296
-
SHA512
994eba64977b91e710b8339f3bfb1d946d37b9bd64853a2e8fdb5b502f41547fd28033de0c1392dd564f17af444e5d3d7869ab745bcdbce307071423e07de66d
-
SSDEEP
1536:+h8Tnj+I4O5+n6J44K5XTIoJgKa0qMax213IFjgyKH/tuL8c+H8SdS4:nTn/ixXaKa0qMW213IFEyKwL8L
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 797b0fb38e7964c38f62ecdf2f475c70ad846189684dd8ecf868c71aad3b4296
Files
-
797b0fb38e7964c38f62ecdf2f475c70ad846189684dd8ecf868c71aad3b4296.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE