Static task
static1
Behavioral task
behavioral1
Sample
de6f66015e605baa65fe55411a5437669e7026b7b441b48e0d8e410c81c944a4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de6f66015e605baa65fe55411a5437669e7026b7b441b48e0d8e410c81c944a4N.exe
Resource
win10v2004-20240802-en
General
-
Target
de6f66015e605baa65fe55411a5437669e7026b7b441b48e0d8e410c81c944a4N
-
Size
72KB
-
MD5
8c40f0b0a81d8920bda8e44ca6bfbd30
-
SHA1
db93a0485b23c62480f441128422ef535d850de6
-
SHA256
de6f66015e605baa65fe55411a5437669e7026b7b441b48e0d8e410c81c944a4
-
SHA512
4dad6d0137ddddff1ed3b48c8bc7c557a947cbd969401b8c00aa08307870f69f9c86b94b20aff978a2ea37bf79b41bccfcea401ff6b9190d90c31a7ae3d1a944
-
SSDEEP
768:LCs9xZefUP7bT0JW+NeDCVY3Y4T2a/Og/1H58HU9UiEb/KEiEixV38Hiv+X2td4A:LfE0pCVQYTdmZPgUN3QivEtA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de6f66015e605baa65fe55411a5437669e7026b7b441b48e0d8e410c81c944a4N
Files
-
de6f66015e605baa65fe55411a5437669e7026b7b441b48e0d8e410c81c944a4N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ