Static task
static1
Behavioral task
behavioral1
Sample
79beb3a66d2f93d58b61d3c5ad5ae168fcc9da6efee7f0b125ab51700cdb707b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
79beb3a66d2f93d58b61d3c5ad5ae168fcc9da6efee7f0b125ab51700cdb707b.exe
Resource
win10v2004-20240802-en
General
-
Target
79beb3a66d2f93d58b61d3c5ad5ae168fcc9da6efee7f0b125ab51700cdb707b
-
Size
93KB
-
MD5
8506c9d17449a1f856ed1f8df637ceb8
-
SHA1
c52ba63164dfe2a59281fc4450bbc8eae338ce8a
-
SHA256
79beb3a66d2f93d58b61d3c5ad5ae168fcc9da6efee7f0b125ab51700cdb707b
-
SHA512
cff5abf17d6ed08d606641cbfdce3c88652fbe54a8c5de875c1359d567013eb598b3561abf74a4ecb266a0a9a2eada560c95a5d97c5f7671757b6a18110d59a1
-
SSDEEP
1536:+EQ3/Av2//ox10Zvrq8P45okChjR4fuB3SeriwvE7RllgiPP1iX1w6Tcjiwg58:+H/AvG/bVW8P453f7wc7rXE34Y58
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 79beb3a66d2f93d58b61d3c5ad5ae168fcc9da6efee7f0b125ab51700cdb707b
Files
-
79beb3a66d2f93d58b61d3c5ad5ae168fcc9da6efee7f0b125ab51700cdb707b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.flh Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ