Static task
static1
Behavioral task
behavioral1
Sample
1856a13add612b7a8b5b0532beddb6b0N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
1856a13add612b7a8b5b0532beddb6b0N.exe
Resource
win10v2004-20240802-en
General
-
Target
1856a13add612b7a8b5b0532beddb6b0N
-
Size
124KB
-
MD5
1856a13add612b7a8b5b0532beddb6b0
-
SHA1
77d9a72f566d6ac5b753717c1c1428ad58840696
-
SHA256
c18e15d4c95863ca233f4dc0ac26e74451757d3e1685988f51df70d587b119cb
-
SHA512
f49157e8b05ae51651937bb39a39e516ed888a20ba96cedfab9e45bc43fc08d1163d2644d8cc6bf7cc93e8d799d7920fda020d9cdd65bdf7e6fc5adb88218bd3
-
SSDEEP
1536:NSCNoZDDWvJ0xP4lkcSC227i61MWiqbCv5Fivizd9ZoiJ8cGfBndRwVhLjlqBrHC:NPguvJ0NWRi16bqC+dLw5e487
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1856a13add612b7a8b5b0532beddb6b0N
Files
-
1856a13add612b7a8b5b0532beddb6b0N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 392KB - Virtual size: 960KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 32KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Tut4you Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 4.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
meaymtzf Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
twtdpyjr Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE