Static task
static1
Behavioral task
behavioral1
Sample
dee2f9fe0e84b61276ef5dc81e841bc0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dee2f9fe0e84b61276ef5dc81e841bc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
dee2f9fe0e84b61276ef5dc81e841bc0N
-
Size
468KB
-
MD5
dee2f9fe0e84b61276ef5dc81e841bc0
-
SHA1
f2afdcfed2a8928f0a9b7a3888c4b88173da6929
-
SHA256
db4b3bc5d0331e671ce2e57cdaeab970e2f0f34c21504c69a95d44815933f943
-
SHA512
8d4f55db7ec26f598f7d61e9700c099b8fc84316b5fa2e4beb41a255778e704a905fdb4b45c0bd76638b7fb24ec4f1fca392fa4f2b3cc9490cea6c1d20b96f88
-
SSDEEP
3072:lGAoogIIId5KtbYLPetjTf8/GCtvP3pnrjHeLVhQKmZ8oRBk7plk:lGboBbKtkP+jTfUZukKmm8Bk7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dee2f9fe0e84b61276ef5dc81e841bc0N
Files
-
dee2f9fe0e84b61276ef5dc81e841bc0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 12.2MB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 288KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ