Static task
static1
Behavioral task
behavioral1
Sample
f45458c0e6a6e9f5d62870d92637afc0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f45458c0e6a6e9f5d62870d92637afc0N.exe
Resource
win10v2004-20240802-en
General
-
Target
f45458c0e6a6e9f5d62870d92637afc0N
-
Size
10KB
-
MD5
f45458c0e6a6e9f5d62870d92637afc0
-
SHA1
357ddaa48632f4d814b5069f98cb6d3df9a3a0dc
-
SHA256
8aa19973b16ab4c71ffab8ece70fd82d14aab406ddc743e0792be37904fd6f78
-
SHA512
c92a27e586413ec5957a8ab1efe388f7a7852fb48ac68937db69478cea2b6d312091bdf8445b8c30d76fb065ef62b62d0859e4366fee9e385840da3d9de5f837
-
SSDEEP
192:nbiqIXsP18touF3lcfFf5yqGvHLSX9kR:biqis9QlcffyqEe2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f45458c0e6a6e9f5d62870d92637afc0N
Files
-
f45458c0e6a6e9f5d62870d92637afc0N.exe windows:1 windows x86 arch:x86
e82dd51b077167be63c004bed23d0c1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
Sleep
Sections
CODE Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE