Static task
static1
Behavioral task
behavioral1
Sample
798fc94b6b1128f35dcdeb0cd30184a7dca1bb7ad22ac2cdcff01ff1b33ce883.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
798fc94b6b1128f35dcdeb0cd30184a7dca1bb7ad22ac2cdcff01ff1b33ce883.exe
Resource
win10v2004-20240802-en
General
-
Target
798fc94b6b1128f35dcdeb0cd30184a7dca1bb7ad22ac2cdcff01ff1b33ce883
-
Size
77KB
-
MD5
4c49a54627856b632ac0f347cf886b22
-
SHA1
518af0cdc0250c04462b21a112dbb8b1abf6c24c
-
SHA256
798fc94b6b1128f35dcdeb0cd30184a7dca1bb7ad22ac2cdcff01ff1b33ce883
-
SHA512
0386ac921aa98614c9dea8d6607e30fe174d363f84f05c3f7f27caea610c3021a08061f8a55c18582f12f8c851b1b48504696deff4a08153e225e445bb5579f9
-
SSDEEP
768:o91QT+PuJuq+jV+FPx3v+V3pUAJUlWXJ92g7tEqPg+pCRz+Yj2p/1H5pVbXdnh2Q:MQT+p+FPoXJE2LtZwfi+TjRC/D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 798fc94b6b1128f35dcdeb0cd30184a7dca1bb7ad22ac2cdcff01ff1b33ce883
Files
-
798fc94b6b1128f35dcdeb0cd30184a7dca1bb7ad22ac2cdcff01ff1b33ce883.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
prot Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ