Static task
static1
Behavioral task
behavioral1
Sample
ed4624489a5096953dd2e1ac800fd17ad1b6cdd4065f0539c3a67554c7828aef.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed4624489a5096953dd2e1ac800fd17ad1b6cdd4065f0539c3a67554c7828aef.exe
Resource
win10v2004-20240426-en
General
-
Target
ed4624489a5096953dd2e1ac800fd17ad1b6cdd4065f0539c3a67554c7828aef
-
Size
75KB
-
MD5
ed10135b22676fdd88f751d7db8abf71
-
SHA1
c48d4629d0d18f1ea400ff6a85616f040abae3fd
-
SHA256
ed4624489a5096953dd2e1ac800fd17ad1b6cdd4065f0539c3a67554c7828aef
-
SHA512
32a1541e0b14936fdb382dcdb4831eba302b3081e62b6bcd44d69a16b901c75a2106e53f667cb08947c0ba6fa0e8c3dfa6ffd82278a88160904ab0c94aa6a1ce
-
SSDEEP
768:agO5xRYi+SfSWHHNvvG5bnl/NqNwsKVDstHxYD0p1aXKynF0vQmYZS0HdJnfWO/1:RshfSWHHNvoLqNwDDGw02eQmh0HjWOxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed4624489a5096953dd2e1ac800fd17ad1b6cdd4065f0539c3a67554c7828aef
Files
-
ed4624489a5096953dd2e1ac800fd17ad1b6cdd4065f0539c3a67554c7828aef.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PEC Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE