Static task
static1
Behavioral task
behavioral1
Sample
00d45d5671d79f57b7521502e5716c29b9d119f5924bb39b2e5858094f4e54d2.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
00d45d5671d79f57b7521502e5716c29b9d119f5924bb39b2e5858094f4e54d2.exe
Resource
win10v2004-20240802-en
General
-
Target
00d45d5671d79f57b7521502e5716c29b9d119f5924bb39b2e5858094f4e54d2.exe
-
Size
1.7MB
-
MD5
6be6c77ab6b8df7b3a848f00d6f91af5
-
SHA1
bc2d8b7a3041a32c827ef64f4173e750f61d05cd
-
SHA256
00d45d5671d79f57b7521502e5716c29b9d119f5924bb39b2e5858094f4e54d2
-
SHA512
9d1cbc76a78b5fce4484ab8fd3c7da2f9471aecbd5032af9538e5c69e6fd6436efec1d162e13f086286a97a02219cf45b3b1bd59822bd4feb9b5217575cabe56
-
SSDEEP
24576:DYjWsi0Y3kEfpxRwCd5toR+Z9IALpnBNMB03US6FGQjoPOGkWFfa+t:/s+zbWCdV1pkB03R0pO9tam
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 00d45d5671d79f57b7521502e5716c29b9d119f5924bb39b2e5858094f4e54d2.exe
Files
-
00d45d5671d79f57b7521502e5716c29b9d119f5924bb39b2e5858094f4e54d2.exe.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.clam01 Size: 440KB - Virtual size: 440KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam02 Size: 988KB - Virtual size: 988KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam03 Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.clam04 Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE