Static task
static1
Behavioral task
behavioral1
Sample
ef3542c6e6e843177837eff358e349b8b20d09b60d3fe59d08291718144c4f8a.exe
Resource
win7-20240903-en
General
-
Target
ef3542c6e6e843177837eff358e349b8b20d09b60d3fe59d08291718144c4f8a
-
Size
67KB
-
MD5
b7f57e9c8e9adaa7aaff61c3acc25bdd
-
SHA1
6ad17339d30468288a342272c7e3a54c6676d9a8
-
SHA256
ef3542c6e6e843177837eff358e349b8b20d09b60d3fe59d08291718144c4f8a
-
SHA512
7d12c18792e42abce10f0aa08e37f0182e27a1d45326bb0cc0fcd5de777a9fc18ea516f27628743d65b22733f15aa36ae79e32bcdacf0bc4ac1e47c76bf9e0d7
-
SSDEEP
1536:25vaYzMXqtGNttyeiZnZLYm1NiS4qz0XSW3iDhy3:25vaY46tGNttyeQLYm1wS4qz3DhO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef3542c6e6e843177837eff358e349b8b20d09b60d3fe59d08291718144c4f8a
Files
-
ef3542c6e6e843177837eff358e349b8b20d09b60d3fe59d08291718144c4f8a.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE