Static task
static1
Behavioral task
behavioral1
Sample
72a2b9f103447dfde42f17fc09137d00d5ef462aed90c4875207077b0c607757N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
72a2b9f103447dfde42f17fc09137d00d5ef462aed90c4875207077b0c607757N.exe
Resource
win10v2004-20241007-en
General
-
Target
72a2b9f103447dfde42f17fc09137d00d5ef462aed90c4875207077b0c607757N
-
Size
64KB
-
MD5
8a7c19278db864ca2d928c2bb10ac710
-
SHA1
9f215df79da5be597bdaf290cf90b10d867e6ad2
-
SHA256
72a2b9f103447dfde42f17fc09137d00d5ef462aed90c4875207077b0c607757
-
SHA512
dd2c1d659b85ddf05163651efa989d03daff0b2c4a0f97fcb9d6d31dadab4ccd25fae17e3d5f55e368fde4256b3219bd10e6f6445a036e34f0aafc5c60315854
-
SSDEEP
768:bOYnrV+qo2T3fc5E+KX8mTjPDKbRH+txu4+/1H54FYmGKA2kms8Y/ts/9d2NzYVp:aYrV+n2fc5E+K1zD2WyfrPFW2iwTbWv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 72a2b9f103447dfde42f17fc09137d00d5ef462aed90c4875207077b0c607757N
Files
-
72a2b9f103447dfde42f17fc09137d00d5ef462aed90c4875207077b0c607757N.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.embm Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE