Static task
static1
Behavioral task
behavioral1
Sample
476d012fa79c6f39d2166766ef3aed48d199ca3df988c83c7cc0790e8a972e72N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
476d012fa79c6f39d2166766ef3aed48d199ca3df988c83c7cc0790e8a972e72N.exe
Resource
win10v2004-20240802-en
General
-
Target
476d012fa79c6f39d2166766ef3aed48d199ca3df988c83c7cc0790e8a972e72N
-
Size
64KB
-
MD5
cdd0d6ce2eb3b9af35fd2d8a4447e370
-
SHA1
5d4240491ec21388078e0fa59225120a1a1076a5
-
SHA256
476d012fa79c6f39d2166766ef3aed48d199ca3df988c83c7cc0790e8a972e72
-
SHA512
735ae1a13d4e12c6809178a390fc1355351f8b442a8e14805537df50b7b2b72c70e319291249c262a22417f4366314902c5025d2238f03218bf0d3f25c146c27
-
SSDEEP
1536:673QZft7vi3t5qW0oCcQbIB72o2LQXdZgQe:E8AGmCF8E5QXds
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 476d012fa79c6f39d2166766ef3aed48d199ca3df988c83c7cc0790e8a972e72N
Files
-
476d012fa79c6f39d2166766ef3aed48d199ca3df988c83c7cc0790e8a972e72N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ