Static task
static1
Behavioral task
behavioral1
Sample
ef49d4788538d4f0785387e4a63634a54a7e39a7176da544202fe189e50be7fd.exe
Resource
win7-20240903-en
General
-
Target
ef49d4788538d4f0785387e4a63634a54a7e39a7176da544202fe189e50be7fd
-
Size
577KB
-
MD5
2f496ad343c36da3dc6ffa51ac2da7b1
-
SHA1
a6af11506b717df5b91760caafd380b8ccb2c7fc
-
SHA256
ef49d4788538d4f0785387e4a63634a54a7e39a7176da544202fe189e50be7fd
-
SHA512
eb9e7318f0a464d9284a3d4629f9808180f09df312bc0223eb3bf89177fb1783f956b00de3a6b98af3c23bd3deb72556fd09c3fe160ee9f93e56571013bb68e8
-
SSDEEP
6144:v+aX3trfaE7cV3iwbAFRWAbd4nf0H05yqE6Hl0ChW0+ksllAXBu0lWGWUJJQ4t0G:v+aL7a3iwbihym2g7XO3LWUQfh4Co
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef49d4788538d4f0785387e4a63634a54a7e39a7176da544202fe189e50be7fd
Files
-
ef49d4788538d4f0785387e4a63634a54a7e39a7176da544202fe189e50be7fd.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE