Static task
static1
Behavioral task
behavioral1
Sample
d6a97038a9a61579649d3fb55e643850442dd5157496765c1a7ff711c501196b.exe
Resource
win7-20240221-en
General
-
Target
d6a97038a9a61579649d3fb55e643850442dd5157496765c1a7ff711c501196b
-
Size
66KB
-
MD5
ef7de8a12b7758689b4b75913142bd9d
-
SHA1
0c9468d15b6677d41a27ddd2c385b803ca5b1dbf
-
SHA256
d6a97038a9a61579649d3fb55e643850442dd5157496765c1a7ff711c501196b
-
SHA512
08c50df0206d542eeb408072eaef2460821ec0a06119ba9a77d09bd8a76c248c896dedc5abd6bdb670c71c84a5ee9c485a245aded4721f750e61747a5f426ae6
-
SSDEEP
768:mYBzh+Vxr1x5cE9Fl5pz8UOutDlMXaoSunjXWNNwDp+Ozli4BaXP0dByt6O/AkH5:/BNsrz8VuJlMXaDuiNSDfzHa/iSfRmq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d6a97038a9a61579649d3fb55e643850442dd5157496765c1a7ff711c501196b
Files
-
d6a97038a9a61579649d3fb55e643850442dd5157496765c1a7ff711c501196b.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE