Static task
static1
Behavioral task
behavioral1
Sample
172805100873dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436853.dat-decoded.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
172805100873dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436853.dat-decoded.exe
Resource
win10v2004-20240802-en
General
-
Target
172805100873dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436853.dat-decoded.exe
-
Size
4KB
-
MD5
8d0a2372d159d409336cde73bd4b3ce0
-
SHA1
f4b2a6f566e51345f2491f4970b4e1b920372abb
-
SHA256
8bf41b6a2ded3c0afcfb058b501c16b44990c532bd918c03001827aa42df8a2a
-
SHA512
932db129ee67a4bd3d49d21ca4560699d100f70d5bed28f303cfe0b72eb3b0f4c39e249689fb67bf2c56d280b7b491de03d28b18e162423c1aab28c1d3094d68
-
SSDEEP
48:6glvUH0xBMVD+krbXNM//YCDOH1DDo7bHLhSIvkmZW5KlOj+FGpZm0NJm:OHMO/SN4DALLhXWgg9Y0NJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 172805100873dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436853.dat-decoded.exe
Files
-
172805100873dcf2097bda1ebce1dc29509a0d1c0ecef0168b8aa56fecb5a19c93ba543436853.dat-decoded.exe.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ