Static task
static1
Behavioral task
behavioral1
Sample
638df2a4f5c050f6263ce290a0ac8f10014ce0dab737d47e736a768c07481946.exe
Resource
win7-20240508-en
General
-
Target
638df2a4f5c050f6263ce290a0ac8f10014ce0dab737d47e736a768c07481946
-
Size
5.7MB
-
MD5
c4e68690c7651a16803af808a49f2259
-
SHA1
b1692e828a25c95276c81d1df4e1c5fc8bc38e3c
-
SHA256
638df2a4f5c050f6263ce290a0ac8f10014ce0dab737d47e736a768c07481946
-
SHA512
0e39cccff7bb7a8fbf1f689e7651a38b3cca4bbfeffc6965e5fe0a482e5b905ff2c9db310101c3a6c4cd3edaf350cec7c9ad90f1311c9c740a07f0857a526913
-
SSDEEP
49152:NPfPv94AEsKU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTP:lKUgTH2M2m9UMpu1QfLczqssnKSk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 638df2a4f5c050f6263ce290a0ac8f10014ce0dab737d47e736a768c07481946
Files
-
638df2a4f5c050f6263ce290a0ac8f10014ce0dab737d47e736a768c07481946.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE