Static task
static1
Behavioral task
behavioral1
Sample
1a5ec764c9770a18c72524fae62e5f02793702438397f72335f16b2bf0a78795.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1a5ec764c9770a18c72524fae62e5f02793702438397f72335f16b2bf0a78795.exe
Resource
win10v2004-20240426-en
General
-
Target
1a5ec764c9770a18c72524fae62e5f02793702438397f72335f16b2bf0a78795
-
Size
14KB
-
MD5
191ac9361b4995f9e8791b0dae53057b
-
SHA1
bee55fb153142e385b979cbe1323ab45460ed18b
-
SHA256
1a5ec764c9770a18c72524fae62e5f02793702438397f72335f16b2bf0a78795
-
SHA512
920db7d3411e518bee9858fc1c5a940e900839289d2a192b0bacde1dda77d28783a13bb21ce4476d6780e734a6db7566c0b2709c5b17692a76a81731509eee2c
-
SSDEEP
384:WrTvpCxVVYVeeeeeeeCHHHHHHH4IBtJ73DE045H:WPB4VVYPA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1a5ec764c9770a18c72524fae62e5f02793702438397f72335f16b2bf0a78795
Files
-
1a5ec764c9770a18c72524fae62e5f02793702438397f72335f16b2bf0a78795.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ