Static task
static1
Behavioral task
behavioral1
Sample
0736f64b748f8a56bf29c2112470ae10N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0736f64b748f8a56bf29c2112470ae10N.exe
Resource
win10v2004-20240802-en
General
-
Target
0736f64b748f8a56bf29c2112470ae10N.exe
-
Size
56KB
-
MD5
0736f64b748f8a56bf29c2112470ae10
-
SHA1
2a1f66cb3708e323f23e3d54ae99aa01d0f2a3c9
-
SHA256
2bfb9c1613228f475c2de12c0cc612848d3d3765b0400e64b2315e1d2e54e51e
-
SHA512
6b7f76582c8015a86f36cac2c387415291c75c9fd937f25811ac0ec068a0bb1341f9549929521bc77219ee3ff8fc09f738c630d72e3deec43d97f7a07d32457a
-
SSDEEP
768:2dQH7BNkfpO/dm1m0sK//mnevcO/18MFS9L3EDYlXSWk1d016p0I/EIxJan0aLTe:2Sss/X6nxFSd3EKX1qL0I/CLTjx0uXGV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0736f64b748f8a56bf29c2112470ae10N.exe
Files
-
0736f64b748f8a56bf29c2112470ae10N.exe.exe windows:4 windows x86 arch:x86
bfc0c2c126df898ded95a1b72c2db5cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumLanguageGroupLocalesW
ReadConsoleW
InterlockedExchange
BaseDumpAppcompatCache
SetEndOfFile
EnumSystemCodePagesA
SetCommMask
ResetWriteWatch
WriteConsoleInputVDMW
TlsFree
SetLastError
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE