Static task
static1
Behavioral task
behavioral1
Sample
379dff35f6e06c04e0acd59225c07ce9f7570137e1cfd38b7680f5e78b1e1858N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
379dff35f6e06c04e0acd59225c07ce9f7570137e1cfd38b7680f5e78b1e1858N.exe
Resource
win10v2004-20241007-en
General
-
Target
379dff35f6e06c04e0acd59225c07ce9f7570137e1cfd38b7680f5e78b1e1858N
-
Size
93KB
-
MD5
12f3735672c09e4b245a1ed13ccfb3f0
-
SHA1
2422a3166b7d7dde10084061ebe36d0b2bd8bdee
-
SHA256
379dff35f6e06c04e0acd59225c07ce9f7570137e1cfd38b7680f5e78b1e1858
-
SHA512
4b518aad3e7f0ad1d7c773adf0045c8b8f175b0d0b9afc49d70fc6c3d113992ad8faebe3721881588321aada6523d29a035c62ef5155fc78497c6ebd45d29412
-
SSDEEP
1536:+ZsisxOMAnY1YuQcflgRvPJc+0HIUsRQhRkRLJzeLD9N0iQGRNQR8RyV+32rR:+ZzsNAfuPmxPJkIjehSJdEN0s4WE+3K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 379dff35f6e06c04e0acd59225c07ce9f7570137e1cfd38b7680f5e78b1e1858N
Files
-
379dff35f6e06c04e0acd59225c07ce9f7570137e1cfd38b7680f5e78b1e1858N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: - Virtual size: 122KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ