Static task
static1
Behavioral task
behavioral1
Sample
34470829dcd72e0a097a5569b29d30c24bb200902ebb57fed4709a5cd1c78538.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
34470829dcd72e0a097a5569b29d30c24bb200902ebb57fed4709a5cd1c78538.exe
Resource
win10v2004-20240426-en
General
-
Target
34470829dcd72e0a097a5569b29d30c24bb200902ebb57fed4709a5cd1c78538
-
Size
320KB
-
MD5
5cfa8a13e75205ce58cf631bc6a0875b
-
SHA1
97e61a7c4aad3f6c8c71392bbdfdb36b6d617d0d
-
SHA256
34470829dcd72e0a097a5569b29d30c24bb200902ebb57fed4709a5cd1c78538
-
SHA512
489d4361f7841d7b38c40eff8c7a3d11ec261697243799d8341b9ece6833db235ee4a9d19ca8638f1262614657e402b88b55fbfc52a4867cffd1e0c1e96e7ad6
-
SSDEEP
6144:p2RfS1556NXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:p2EB6NxDIBuOFe7/uT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34470829dcd72e0a097a5569b29d30c24bb200902ebb57fed4709a5cd1c78538
Files
-
34470829dcd72e0a097a5569b29d30c24bb200902ebb57fed4709a5cd1c78538.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE