Static task
static1
Behavioral task
behavioral1
Sample
417d78a6cad699451ea84f7733c330d0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
417d78a6cad699451ea84f7733c330d0N.exe
Resource
win10v2004-20240709-en
General
-
Target
417d78a6cad699451ea84f7733c330d0N.exe
-
Size
8KB
-
MD5
417d78a6cad699451ea84f7733c330d0
-
SHA1
98dcbb8c9dae8bef5162a2278f24d01e309fd8d6
-
SHA256
bfdc016389651e25baae26fd6cfb7417166dc8cdcc7a3846f00f45e4548574df
-
SHA512
e2643d84dd7f91ea66b2029a16e0a64c72a3aafdaa2d0d2fa119c91d5f6287204f4d727deb9a64fb723ddec1e5939fec108b0f8d2acfc374de5e069e4d2f2e12
-
SSDEEP
48:CoRl0lPEBQt++vJ5A+RY3WBSdldxo57R9SxRTU59LiyVVrxkB:tRm+SUs5AaWWBSP07RMWiyVVy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 417d78a6cad699451ea84f7733c330d0N.exe
Files
-
417d78a6cad699451ea84f7733c330d0N.exe.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.lrwu Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE