Static task
static1
Behavioral task
behavioral1
Sample
adafe48850f21b912a7254a0dfae074908ff5c12e4a2cbb637aed4af78ed9cc9.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
adafe48850f21b912a7254a0dfae074908ff5c12e4a2cbb637aed4af78ed9cc9.exe
Resource
win10v2004-20240508-en
General
-
Target
adafe48850f21b912a7254a0dfae074908ff5c12e4a2cbb637aed4af78ed9cc9
-
Size
14KB
-
MD5
934c213e3dc74fdd4dcf943c7a78800c
-
SHA1
3f6aac43e14b04081d9619e02167e1ab7542edca
-
SHA256
adafe48850f21b912a7254a0dfae074908ff5c12e4a2cbb637aed4af78ed9cc9
-
SHA512
7d1c1500c12629320e43a632775d3013866188db2149d598e60bf0fc96d0f248f7ccb8143ef77e8a8e64af77f97902a65a29d3fba329d16733c90d030a890499
-
SSDEEP
384:kGDGjoHdbOa0enxXxdbdZaHTIIL3O79t9T1z/MiC14quUDE045H6XvXvXvXv:xDT1D06h3bdy+xtvzhKAoXvXvXvXv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource adafe48850f21b912a7254a0dfae074908ff5c12e4a2cbb637aed4af78ed9cc9
Files
-
adafe48850f21b912a7254a0dfae074908ff5c12e4a2cbb637aed4af78ed9cc9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ