Static task
static1
Behavioral task
behavioral1
Sample
11dfa8509a25f759aaf24a28c6242400N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
11dfa8509a25f759aaf24a28c6242400N.exe
Resource
win10v2004-20240802-en
General
-
Target
11dfa8509a25f759aaf24a28c6242400N.exe
-
Size
7KB
-
MD5
11dfa8509a25f759aaf24a28c6242400
-
SHA1
3bb0bceeeb6608be99b04339a89af0e03a42085d
-
SHA256
db68a3608c414595c4577f6822dde58a97ccfb875fd5378c79d247143403e89b
-
SHA512
31d1b05b8835e8b645fb3e5c3d8eeb926cc9bd81d1a7f16128d64524853e90d26a5de0f46a164ce6fd6c6417989694182c3cdde877fcd1fffdd1ea2defbc10fd
-
SSDEEP
24:eFGStrJ9u0/6P8GnZdEBQAV8aKq9K9qyoeNDJSqUmZEWdXCIGDpmB:is0xeEBQpE9TSDoqUjWZCSB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 11dfa8509a25f759aaf24a28c6242400N.exe
Files
-
11dfa8509a25f759aaf24a28c6242400N.exe.exe windows:4 windows x64 arch:x64
b4c6fff030479aa3b12625be67bf4914
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAlloc
ExitProcess
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.hdls Size: 1024B - Virtual size: 584B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE