Static task
static1
Behavioral task
behavioral1
Sample
379ce0bc433756f420c944c2619fe974598daf23e89e8d268d2a6bc16170ec42.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
379ce0bc433756f420c944c2619fe974598daf23e89e8d268d2a6bc16170ec42.exe
Resource
win10v2004-20240426-en
General
-
Target
379ce0bc433756f420c944c2619fe974598daf23e89e8d268d2a6bc16170ec42.exe
-
Size
14KB
-
MD5
1bc4412b4f6f55726715f6e487948bd0
-
SHA1
4c5c0cbd6a07d16f6cfc47765ed0784fe537ef78
-
SHA256
379ce0bc433756f420c944c2619fe974598daf23e89e8d268d2a6bc16170ec42
-
SHA512
c2c2bbd8f58f01287ffb18534b3bd97ed468e3e7a8a4cac05e96196eaa63654abf0cd7fe1c98a1262e773e0a4d88d15993ece39be1d4a35c12432c9f8957dd99
-
SSDEEP
192:474UaB1q7kxxxxxxxxx8q3q3q3q3q3ZF4ZRnBBnqDE045HQCO3O3O3O3:47haB1Ke4ZBrqDE045H7MMMM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 379ce0bc433756f420c944c2619fe974598daf23e89e8d268d2a6bc16170ec42.exe
Files
-
379ce0bc433756f420c944c2619fe974598daf23e89e8d268d2a6bc16170ec42.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ