Static task
static1
Behavioral task
behavioral1
Sample
894e5d0e83a05a5a68fb8037003d44a0N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
894e5d0e83a05a5a68fb8037003d44a0N.exe
Resource
win10v2004-20240802-en
General
-
Target
894e5d0e83a05a5a68fb8037003d44a0N.exe
-
Size
111KB
-
MD5
894e5d0e83a05a5a68fb8037003d44a0
-
SHA1
ee838212640ae4f11f91166f29350da3638f7f3b
-
SHA256
4b7fa9d374e1eecd632693c201591e1d9c2285fe8338d3200f9fe72d2be324d0
-
SHA512
872e9ca25d43c1b96ac28f01b48e2f1695cce186cb382343bfe627b176cab3595ad2f0f79157c1b51dc8ddafbe46e0fc4448d5abacc7516b7e0892c80cdd541a
-
SSDEEP
1536:wgoh6SX5+Qm8MDjjDfrnFhR+C4eDv13lYjaSxxgVYZRQvRRs3cO57OWxXPu4n6yM:wVoKANnjS/evE9pui6yYPaI7Dehib
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 894e5d0e83a05a5a68fb8037003d44a0N.exe
Files
-
894e5d0e83a05a5a68fb8037003d44a0N.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ajelhf Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ