Static task
static1
Behavioral task
behavioral1
Sample
794c20c8d6f3b427552d69a6203d08d4140bffa4de5848ab6f8fda2aefcb24d0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
794c20c8d6f3b427552d69a6203d08d4140bffa4de5848ab6f8fda2aefcb24d0.exe
Resource
win10v2004-20241007-en
General
-
Target
794c20c8d6f3b427552d69a6203d08d4140bffa4de5848ab6f8fda2aefcb24d0.exe
-
Size
396KB
-
MD5
e9a4ee4501e517a1f0975bbd55737303
-
SHA1
69ba1b7ba832b0bee2279f8dfcc1a4fd83eefb0f
-
SHA256
794c20c8d6f3b427552d69a6203d08d4140bffa4de5848ab6f8fda2aefcb24d0
-
SHA512
c85ec1da78a38be290134d54b3b3cb53a9a636ed0402d851ab401fe436d5bd92d788fd9aa9151894f17854c609f4542b86e0a20cef97684e2ef9ff3e56e9ec15
-
SSDEEP
12288:vdDU6g13sJd1fm/+yb3O2jg82ydU/DdKumhb:vdE3sJd1fm/+yb3OYg84/JHyb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 794c20c8d6f3b427552d69a6203d08d4140bffa4de5848ab6f8fda2aefcb24d0.exe
Files
-
794c20c8d6f3b427552d69a6203d08d4140bffa4de5848ab6f8fda2aefcb24d0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.sfp Size: 221KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dny7 Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nek Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.imports Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE