Static task
static1
Behavioral task
behavioral1
Sample
efa8225ee7cf359b48719c6b6eb6a30847f8ff06d13fe259c7bd5d08211c4c47.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efa8225ee7cf359b48719c6b6eb6a30847f8ff06d13fe259c7bd5d08211c4c47.exe
Resource
win10v2004-20240802-en
General
-
Target
efa8225ee7cf359b48719c6b6eb6a30847f8ff06d13fe259c7bd5d08211c4c47
-
Size
4.1MB
-
MD5
2d8503027cd46646bcd969d9cb8b10a0
-
SHA1
8320aa3c2c6f975ca565fe95ef8d63e75137ae92
-
SHA256
efa8225ee7cf359b48719c6b6eb6a30847f8ff06d13fe259c7bd5d08211c4c47
-
SHA512
1232d1aa01f7250edc1c52823b432cab977f3c86feed20053ffcc5835f99f314df7f11f6c396e7bea8388b9d8c6a5e81a212356d2cecd17509c2ad6e4b63a763
-
SSDEEP
49152:vM4mdHJSyAxyOaa8Bxe2B38tATKIw9xyL7SlvPMu3uLbwvvtgi:vM4mdpB6ydZ202l9a0PTpg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa8225ee7cf359b48719c6b6eb6a30847f8ff06d13fe259c7bd5d08211c4c47
Files
-
efa8225ee7cf359b48719c6b6eb6a30847f8ff06d13fe259c7bd5d08211c4c47.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE