Static task
static1
Behavioral task
behavioral1
Sample
f0c9c324c1add9fc9d4af298fd344720N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f0c9c324c1add9fc9d4af298fd344720N.exe
Resource
win10v2004-20240802-en
General
-
Target
f0c9c324c1add9fc9d4af298fd344720N.exe
-
Size
7KB
-
MD5
f0c9c324c1add9fc9d4af298fd344720
-
SHA1
17e7c1ae31bf8267961bbbba833a6ea034369f9f
-
SHA256
21f9d2f133d068ac5e4e4d23cfba1606f1a233303a4a202e1e811d937d025a2c
-
SHA512
671fd0c93f4f4623ce11d8675155013ae8b3622e28feb7b1e4e7675131014315fa54d31350039d2170d0098ab6973e5fbb03d05aaf0a49c9c4d2b8caee0ec8e9
-
SSDEEP
192:svBJqAPhpeS1ZK8O3CDHdbzM60lkwiRKEgR:CUAPo2M3lke3R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f0c9c324c1add9fc9d4af298fd344720N.exe
Files
-
f0c9c324c1add9fc9d4af298fd344720N.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE