Static task
static1
Behavioral task
behavioral1
Sample
a317559895ba92d7f5af4dd602434d710bb6b7c0498cd94c3eb9978d13c14485.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
a317559895ba92d7f5af4dd602434d710bb6b7c0498cd94c3eb9978d13c14485.exe
Resource
win10v2004-20240426-en
General
-
Target
a317559895ba92d7f5af4dd602434d710bb6b7c0498cd94c3eb9978d13c14485
-
Size
14KB
-
MD5
51fe4ca528a591f7170907f14f395873
-
SHA1
ea217aaae9de7450deeefe69b3d84d374488cf51
-
SHA256
a317559895ba92d7f5af4dd602434d710bb6b7c0498cd94c3eb9978d13c14485
-
SHA512
33ce982365c025d7ca6161708ecf7df8566b7caa1a214688670f0679688b7d875f6c83386225989030ac602d7430d73bf589750c1e0e3d718e99d5c5de0e0b65
-
SSDEEP
192:Emg0lVsgYjDBtFLUx8v333333333WtBtBtBtBt/nufvJjPTkqDE045HQ:EhqsDDBtNUN////pnevJ3TDE045H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a317559895ba92d7f5af4dd602434d710bb6b7c0498cd94c3eb9978d13c14485
Files
-
a317559895ba92d7f5af4dd602434d710bb6b7c0498cd94c3eb9978d13c14485.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ