Static task
static1
Behavioral task
behavioral1
Sample
ef91f8a8802cad4e82e4ded8817c4450N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ef91f8a8802cad4e82e4ded8817c4450N.exe
Resource
win10v2004-20240802-en
General
-
Target
ef91f8a8802cad4e82e4ded8817c4450N
-
Size
4KB
-
MD5
ef91f8a8802cad4e82e4ded8817c4450
-
SHA1
368c18a012ba932191d4e9af811552f1409d3fa7
-
SHA256
99e2d64fb5b9c6e2b64e44dafe810e2e950152305e37494faab2df8ba4e0bdef
-
SHA512
ddeadb7141de489311b90a1b014903ba9ec02ba067a91d2cae30c7509bf6064ed511db2eed9ce5b22a64f043add8313f00072009d5070de4c174daab2fbbde4b
-
SSDEEP
96:LvIdSLQPZARC3dCE8Y0Jw5NL6EVwHHKg2:jswdRCNCE8YPWowHHK7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef91f8a8802cad4e82e4ded8817c4450N
Files
-
ef91f8a8802cad4e82e4ded8817c4450N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
6134xdkh Size: - Virtual size: 24KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5854cwel Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5908zjyh Size: 576B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE