Static task
static1
Behavioral task
behavioral1
Sample
81b302323068290ee99b9e90f1d66300N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
81b302323068290ee99b9e90f1d66300N.exe
Resource
win10v2004-20240802-en
General
-
Target
81b302323068290ee99b9e90f1d66300N
-
Size
407KB
-
MD5
81b302323068290ee99b9e90f1d66300
-
SHA1
74d25592e1df559698d3870d459213ea74f796e7
-
SHA256
86612ab020fddce28e2b667e14c9b316f52ccf665025cb52dd6b3044e93e8ca5
-
SHA512
7214204e4a594c3f19d09d7b4b3b20d16c32d790b1513e638f9d21baad0b01733b2e31ea62ba5a604bad6ad9bded0b532acc59ce5e00f68adcf1e9ea7aec5762
-
SSDEEP
6144:eBUiV9Hwx83AYvhCF2idZecnl20lHRxp3gyncduD7yB9VCO6Sco4q8+dE6CqXIfT:SuW3fvIF3Z4mxxRDqVTVOCXIft
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 81b302323068290ee99b9e90f1d66300N
Files
-
81b302323068290ee99b9e90f1d66300N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 23KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 38KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 331KB - Virtual size: 332KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE