Static task
static1
Behavioral task
behavioral1
Sample
efa8fc9e4620898e2fc3f354619dac980ffe253a032e37f060f0830798485a41N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
efa8fc9e4620898e2fc3f354619dac980ffe253a032e37f060f0830798485a41N.exe
Resource
win10v2004-20241007-en
General
-
Target
efa8fc9e4620898e2fc3f354619dac980ffe253a032e37f060f0830798485a41N
-
Size
273KB
-
MD5
b849316d8fe2bb29a08ba69fc533dc20
-
SHA1
dcceb3c5b2729ea886f1c6af49fb8346e4799196
-
SHA256
efa8fc9e4620898e2fc3f354619dac980ffe253a032e37f060f0830798485a41
-
SHA512
e804fe568ffe414e925b9b823266a160cb778dcb36d255320b6f8d6334c7de13b63a909a833d8a02c3bed7852f3a950f6c95cb721e52d2ce40fd7ea278b5e13a
-
SSDEEP
6144:zJFzjKA8ehY8Rf9pIpwnifzpZYyn+vDXggWKWiyhfj:zJFKfElwwifz+jOviU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource efa8fc9e4620898e2fc3f354619dac980ffe253a032e37f060f0830798485a41N
Files
-
efa8fc9e4620898e2fc3f354619dac980ffe253a032e37f060f0830798485a41N.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 316KB - Virtual size: 313KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ