Static task
static1
Behavioral task
behavioral1
Sample
30cf49a69972ed8c16c188bd08a097a0N.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
30cf49a69972ed8c16c188bd08a097a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
30cf49a69972ed8c16c188bd08a097a0N.exe
-
Size
4.6MB
-
MD5
30cf49a69972ed8c16c188bd08a097a0
-
SHA1
12c90d04df64f357a0fb085039f309dfc68afb1c
-
SHA256
2d10221652b16a3713b320e6eba89799997789f3c68b20de67eef2a20b173923
-
SHA512
ff4049a92212b37e34f5f6bc2afd0a91a7be329da55d561f1bd4cd2dab7e29c7f3ac99373317959e911595ff379f42d8caba0172c35e3e11d2d8ba2f7363570a
-
SSDEEP
98304:tO8Loy3XpFQzVTE+wtKqzsvLRbifhbBAYQeSklS:NxjQRjwtCvLZi5OklS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30cf49a69972ed8c16c188bd08a097a0N.exe
Files
-
30cf49a69972ed8c16c188bd08a097a0N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
test Size: - Virtual size: 988KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
data Size: 625KB - Virtual size: 628KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE