Static task
static1
Behavioral task
behavioral1
Sample
dad795b7043beee233be52462d60a5292de8eebb27deee82e144a7458ae18e74.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
dad795b7043beee233be52462d60a5292de8eebb27deee82e144a7458ae18e74.exe
Resource
win10v2004-20240802-en
General
-
Target
dad795b7043beee233be52462d60a5292de8eebb27deee82e144a7458ae18e74.exe
-
Size
1.1MB
-
MD5
f5aa126b1d0f6d84c7d0b11da386dbda
-
SHA1
52fef1b355520dcf4b26b4797cada4d330ca9a3c
-
SHA256
dad795b7043beee233be52462d60a5292de8eebb27deee82e144a7458ae18e74
-
SHA512
21f0cfa487130eef55d755f7f371ea2abedc6214e570091e42d2f48bebd3c60e0bbd93b72a3b53afbe958164bd4088fdaf79a522e8dd984b59468c20ab405198
-
SSDEEP
24576:13BPo/bldyN5c6EtcToNGtK1CISgKyMTX/o5YUg41gqCr+4:FQb7gmHcoYFID9MbQtgKC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dad795b7043beee233be52462d60a5292de8eebb27deee82e144a7458ae18e74.exe
Files
-
dad795b7043beee233be52462d60a5292de8eebb27deee82e144a7458ae18e74.exe.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE