Static task
static1
Behavioral task
behavioral1
Sample
f89778a5fdc8671cf60354962d283dba4c1ad6f40ec231c04e8736932cd51ead.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f89778a5fdc8671cf60354962d283dba4c1ad6f40ec231c04e8736932cd51ead.exe
Resource
win10v2004-20240508-en
General
-
Target
f89778a5fdc8671cf60354962d283dba4c1ad6f40ec231c04e8736932cd51ead
-
Size
72KB
-
MD5
9f1afab5ee52aa6c1eb627a327c3e9f9
-
SHA1
3d7475bc7dfc2e22d804e433cf1e92cc84c76655
-
SHA256
f89778a5fdc8671cf60354962d283dba4c1ad6f40ec231c04e8736932cd51ead
-
SHA512
c624b0bd390b40c108078dffb77a24df65f29d07a9af7d16cf0b661bbb598067cb7e511f0f2863330ea0dde53eb5a9d615fddf6b2e2a0cef4b2fde22e4177c94
-
SSDEEP
768:GrFrcbVxwKdNWgMcWKS7sjXe/HpuYaqh/9zkWW/1H58sU9UiEb/KEiEixV38Hivb:Gr+bVx9PS/6ORPaM9zV8kPgUN3QivEtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f89778a5fdc8671cf60354962d283dba4c1ad6f40ec231c04e8736932cd51ead
Files
-
f89778a5fdc8671cf60354962d283dba4c1ad6f40ec231c04e8736932cd51ead.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ