Static task
static1
Behavioral task
behavioral1
Sample
0634735387a6dfbc63210e7c0665f9bf35943dc450941ecf7c6555c5df138ffbN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0634735387a6dfbc63210e7c0665f9bf35943dc450941ecf7c6555c5df138ffbN.exe
Resource
win10v2004-20240802-en
General
-
Target
0634735387a6dfbc63210e7c0665f9bf35943dc450941ecf7c6555c5df138ffbN
-
Size
59KB
-
MD5
dee2a56c18fa5c50825330f3ba8e12c0
-
SHA1
ee2db79a3a54227a0cf72cf3b1df8dbdc5c33590
-
SHA256
0634735387a6dfbc63210e7c0665f9bf35943dc450941ecf7c6555c5df138ffb
-
SHA512
26e70b955631082e876179126d893f7242459e4ece0a3a938112d7e00bf638fb9edd0a57439a49d580264141a7da3582c4e3d184fdea43cf47dfb927111d97a1
-
SSDEEP
1536:h4qthl7esBi3SYhzSgXduXSgE00000000000000000U000000010000013khFdh:xthl3iJIgNuXSgrdh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0634735387a6dfbc63210e7c0665f9bf35943dc450941ecf7c6555c5df138ffbN
Files
-
0634735387a6dfbc63210e7c0665f9bf35943dc450941ecf7c6555c5df138ffbN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.fldo Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ