Static task
static1
Behavioral task
behavioral1
Sample
805924cd1ecd6c1ecaebcd167fc9def0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
805924cd1ecd6c1ecaebcd167fc9def0N.exe
Resource
win10v2004-20240802-en
General
-
Target
805924cd1ecd6c1ecaebcd167fc9def0N
-
Size
640KB
-
MD5
805924cd1ecd6c1ecaebcd167fc9def0
-
SHA1
c780e4948005d1d2f70f90e2bc61f232c6173710
-
SHA256
9bdc78f5e06f22781424800f3bf011b11ac523026050bbb2ca98072c8972dd21
-
SHA512
02a610005af3cfc95a65abba731e0bea5ca0ce043dd44a597f6d8aacdd9f3325acbaf8f1f6932eb1ae3039693f0a1332e942771acc4a0dfa14c76ada982d8336
-
SSDEEP
12288:yYIW0p98Oh8P7h8dn03VyMiYaNkZ3vbZ3MDslB/4uMe2rVYNIz:qW298E8ufVYas3jZ3MgB/4uMe2rVYNIz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 805924cd1ecd6c1ecaebcd167fc9def0N
Files
-
805924cd1ecd6c1ecaebcd167fc9def0N.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 224KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 219KB - Virtual size: 242KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ