Static task
static1
Behavioral task
behavioral1
Sample
ef981582ac391485773d495f38c544293f15b1ffa3f2c44ac896a68bc37ae52d.exe
Resource
win7-20240903-en
General
-
Target
ef981582ac391485773d495f38c544293f15b1ffa3f2c44ac896a68bc37ae52d
-
Size
165KB
-
MD5
620a708d29766e1da3ea2cca0fe0e5d0
-
SHA1
a7de11702542544ac2287e8cd0fda62257d0d013
-
SHA256
ef981582ac391485773d495f38c544293f15b1ffa3f2c44ac896a68bc37ae52d
-
SHA512
0175738ece6f7c96769440a687d16431cf9b79f15d8ae76c53d1459980fe50962345865d220bd80f7a49e34dbc301605e2273cdbc2348d8d323648e6475a44b9
-
SSDEEP
3072:2naY46tGNttyeQLYm1s99djmMGWBgh1002J8emEu3T7TO+9Z9sTOVrZzxVxU:C46tGdye41WYWBW1Wu3rOOuOVr8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef981582ac391485773d495f38c544293f15b1ffa3f2c44ac896a68bc37ae52d
Files
-
ef981582ac391485773d495f38c544293f15b1ffa3f2c44ac896a68bc37ae52d.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Upack Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE