Static task
static1
Behavioral task
behavioral1
Sample
478c37eb6687780c9009d4ac70326c7811a36e38ebf95deff162ad5eddebb18bN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
478c37eb6687780c9009d4ac70326c7811a36e38ebf95deff162ad5eddebb18bN.exe
Resource
win10v2004-20241007-en
General
-
Target
478c37eb6687780c9009d4ac70326c7811a36e38ebf95deff162ad5eddebb18bN
-
Size
329KB
-
MD5
eb30dacd8268fc7de017ad3c9d206860
-
SHA1
d50a2c77cbcc1668198df86b4478889b1603d065
-
SHA256
478c37eb6687780c9009d4ac70326c7811a36e38ebf95deff162ad5eddebb18b
-
SHA512
95626247d30d97e5ed983f16655f472da9a1d2cae17415ef3eb30cda90fc48c89d82ecae7315eaea96c8f7e280d44d1337b91eeba9f02dced7b944de554cf880
-
SSDEEP
6144:zJFzjKA8e+9xDC7dNeQJ+qMBMwnNKyAOxf4fl88eT:zJFK/DwdN9+3BzPAOSN8F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 478c37eb6687780c9009d4ac70326c7811a36e38ebf95deff162ad5eddebb18bN
Files
-
478c37eb6687780c9009d4ac70326c7811a36e38ebf95deff162ad5eddebb18bN.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ