Static task
static1
Behavioral task
behavioral1
Sample
d964ee4491f611a572b738ed810ec7b49bc1f672323a351b497b0a6425c77266.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d964ee4491f611a572b738ed810ec7b49bc1f672323a351b497b0a6425c77266.exe
Resource
win10v2004-20240508-en
General
-
Target
d964ee4491f611a572b738ed810ec7b49bc1f672323a351b497b0a6425c77266
-
Size
14KB
-
MD5
31c1d6f7e94b98933f62195ddea03872
-
SHA1
36ad9ebd055cb0cef90e06fb686d3b9b4af4a6cf
-
SHA256
d964ee4491f611a572b738ed810ec7b49bc1f672323a351b497b0a6425c77266
-
SHA512
ee70bb16b494713f0f9381ac5c1d64b731eeeaf1418152b2b26f03dea9d353e395950f6e6409c34aa9154d626cc5b8b8e1c3a7fa0770e095f6512c7b6a8603c1
-
SSDEEP
384:gtbzriwcAMRyXRutJ+v8CycDE045Hmttt:EzrNRXAtDCyGAQttt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d964ee4491f611a572b738ed810ec7b49bc1f672323a351b497b0a6425c77266
Files
-
d964ee4491f611a572b738ed810ec7b49bc1f672323a351b497b0a6425c77266.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ