Static task
static1
Behavioral task
behavioral1
Sample
45791c16b6be9466135a02ba17d311a7f9a3f84b7a6ab1cd31de42add406646a.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
45791c16b6be9466135a02ba17d311a7f9a3f84b7a6ab1cd31de42add406646a.exe
Resource
win10v2004-20240704-en
General
-
Target
45791c16b6be9466135a02ba17d311a7f9a3f84b7a6ab1cd31de42add406646a
-
Size
63KB
-
MD5
1ad075b42e166a9788e1dba02bdab00f
-
SHA1
845a9567060bc0f7930990119a98d563b35a7c54
-
SHA256
45791c16b6be9466135a02ba17d311a7f9a3f84b7a6ab1cd31de42add406646a
-
SHA512
7be3139618b9e45caeb5ee59745a2a999ee45b1f34623452bf2f8e70e9767c21638d7407f3ab088f3e79890b53ffd64bcbecb6d6779097f6a182804d9ecb4a9b
-
SSDEEP
768:xF3gWd52GymqzrE3krVCiTa7Kso0PSurLtupBR7hSir/K0/1H5oVEEUfmrUTvn9g:xF92GymGk7WaWGrLEUimK+VREn9rjDHE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45791c16b6be9466135a02ba17d311a7f9a3f84b7a6ab1cd31de42add406646a
Files
-
45791c16b6be9466135a02ba17d311a7f9a3f84b7a6ab1cd31de42add406646a.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ