Static task
static1
Behavioral task
behavioral1
Sample
efdd178d0f0c5c15b1fa1a596923a948788a065fd6661286b8959738091631e8.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
efdd178d0f0c5c15b1fa1a596923a948788a065fd6661286b8959738091631e8.exe
Resource
win10v2004-20240426-en
General
-
Target
efdd178d0f0c5c15b1fa1a596923a948788a065fd6661286b8959738091631e8
-
Size
83KB
-
MD5
1f5bd55ef0028da8626b35b5afaaa1ab
-
SHA1
b950af471dc3c7281adbc44b9bb7eee3994f5124
-
SHA256
efdd178d0f0c5c15b1fa1a596923a948788a065fd6661286b8959738091631e8
-
SHA512
937facf89a075fe8ae294312333bf316ef1a0b895bfbf5acdbf998ded82e928a7f85fdff6ac15d06ee6d4f8b4574b432b9237c8d92f35e669b0ae750c895716d
-
SSDEEP
768:HNXn2CdV6Y3S7GCTJi87Zuh4E6hC3cyaMjro+/W1IANXn2CdV6Y3S7GCTJi87ZuH:V2VSjro+W1d2VSjro+pHwXEa61l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efdd178d0f0c5c15b1fa1a596923a948788a065fd6661286b8959738091631e8
Files
-
efdd178d0f0c5c15b1fa1a596923a948788a065fd6661286b8959738091631e8.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 27KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE