Static task
static1
Behavioral task
behavioral1
Sample
d36c19b24aa660e4ffd25cbf96364e11c2bfa995f20f71a6164b007bb40691c9.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
d36c19b24aa660e4ffd25cbf96364e11c2bfa995f20f71a6164b007bb40691c9.exe
Resource
win10v2004-20240508-en
General
-
Target
d36c19b24aa660e4ffd25cbf96364e11c2bfa995f20f71a6164b007bb40691c9
-
Size
96KB
-
MD5
348f2730e167817773c666971e16365a
-
SHA1
345806c52ccab46de0a11f4a1ea638dd6f26f15f
-
SHA256
d36c19b24aa660e4ffd25cbf96364e11c2bfa995f20f71a6164b007bb40691c9
-
SHA512
298f1b1081d4336bb37c7a213bf0fc0b096a1b87d029f2cccc0b330d95af33a9c0f7cbc70d31fd375aa591d4cdbe23d5870ff2dd407f0cda0b5e2dbaf7301935
-
SSDEEP
1536:aDQK/1C8LzRGzRkM1QhWdmi8eVz6nWg6+4yXyJdqMH2tB74S7V+5pUMv84WMRw8C:cZC8LzRGNkpWZ2E+HiJYMHil4Sp+7H7c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d36c19b24aa660e4ffd25cbf96364e11c2bfa995f20f71a6164b007bb40691c9
Files
-
d36c19b24aa660e4ffd25cbf96364e11c2bfa995f20f71a6164b007bb40691c9.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ