Static task
static1
Behavioral task
behavioral1
Sample
a36fcb065fd6e79341d7c0e5ed5d20e7fb7bb07f8041e8d8d68dc3d97dec3b0b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a36fcb065fd6e79341d7c0e5ed5d20e7fb7bb07f8041e8d8d68dc3d97dec3b0b.exe
Resource
win10v2004-20240802-en
General
-
Target
a36fcb065fd6e79341d7c0e5ed5d20e7fb7bb07f8041e8d8d68dc3d97dec3b0b
-
Size
80KB
-
MD5
27cb853470da696cf2efb7374378b6f1
-
SHA1
b0377ad1d0bf8bc50f6af25e576e78ad2efd99ba
-
SHA256
a36fcb065fd6e79341d7c0e5ed5d20e7fb7bb07f8041e8d8d68dc3d97dec3b0b
-
SHA512
61d2936f14bf618d3fecbcc30c60e1352e5fea3c940e73ab9adf1c75e9381cf53fba8fd07875b1f5aa2dd12c50344f2f5d215571eb892ef1e157f4247c7c0e13
-
SSDEEP
1536:E5ss86WVsa5Uqbp1OJf7S0EM9SAaFbXL2cqNyphRQAWRJJ5R2xOSC4BG:CG3UK1Ol7S0EM9ANXLqKheJrJ5wxO344
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a36fcb065fd6e79341d7c0e5ed5d20e7fb7bb07f8041e8d8d68dc3d97dec3b0b
Files
-
a36fcb065fd6e79341d7c0e5ed5d20e7fb7bb07f8041e8d8d68dc3d97dec3b0b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ