Static task
static1
Behavioral task
behavioral1
Sample
42a6f490488a13b2a525945e0fee24a0N.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
42a6f490488a13b2a525945e0fee24a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
42a6f490488a13b2a525945e0fee24a0N.exe
-
Size
1.7MB
-
MD5
42a6f490488a13b2a525945e0fee24a0
-
SHA1
a12bb8a7dfab7ab37beabb96ca69253250155598
-
SHA256
07fee1c921ac95c9b21d34dee92752e4f91e2b19680efd6d181deea484b90d5c
-
SHA512
50ec678879ab612e75f330c39526e6ed3f4e7a3c70f6a15b14c9c7324aefeecebc9f18a8ba297c30b181380506a54a2e241d354a2f57931ba96fd3faad67f326
-
SSDEEP
24576:t3i8Or3nAPjYM3i8Or3nArzEemkCIabjKoh9W9:7O4OkzESCIabjKoh9W9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42a6f490488a13b2a525945e0fee24a0N.exe
Files
-
42a6f490488a13b2a525945e0fee24a0N.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ