Static task
static1
Behavioral task
behavioral1
Sample
d4efcb02d8f0672c36b5a11c5fbd8c53c23f0150dd9cc1fcd8eeecee239cf8bcN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4efcb02d8f0672c36b5a11c5fbd8c53c23f0150dd9cc1fcd8eeecee239cf8bcN.exe
Resource
win10v2004-20240802-en
General
-
Target
d4efcb02d8f0672c36b5a11c5fbd8c53c23f0150dd9cc1fcd8eeecee239cf8bcN
-
Size
80KB
-
MD5
10ee07f97a418c9471279a0eb1d620b0
-
SHA1
46d511170b4c09441e2abffc8900fe989b1d81f1
-
SHA256
d4efcb02d8f0672c36b5a11c5fbd8c53c23f0150dd9cc1fcd8eeecee239cf8bc
-
SHA512
c978d38c24c080ecd007f064613c6bc29d906e8bca84197721f8e2f0c930697c98dd629d189f9f906c60a3538612aa743052bb658715d3982953c3fe30f1642e
-
SSDEEP
1536:z+11wieL2MLXHcWbge36kieFnPpHSsloAXCpj7taEJ5YViOhRQA5RJJ5R2xOSC44:z+11ReLRL3cwgi6GnPpHnlRSOEJ5YiOX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d4efcb02d8f0672c36b5a11c5fbd8c53c23f0150dd9cc1fcd8eeecee239cf8bcN
Files
-
d4efcb02d8f0672c36b5a11c5fbd8c53c23f0150dd9cc1fcd8eeecee239cf8bcN.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.reloc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ