Static task
static1
Behavioral task
behavioral1
Sample
d8964bcfca3565c73b50bc677629cde912258c23337ee5525017a5799fb175c5N.exe
Resource
win7-20241010-en
General
-
Target
d8964bcfca3565c73b50bc677629cde912258c23337ee5525017a5799fb175c5N.exe
-
Size
1.4MB
-
MD5
fb3f209a3cc6a1476c41cff254891230
-
SHA1
c59fec012d4c98ff0be70703484d09344563bc0e
-
SHA256
d8964bcfca3565c73b50bc677629cde912258c23337ee5525017a5799fb175c5
-
SHA512
08154b2276605edeb59304f17b0ee20fa870b88ee975cc0856a721a6dc0b9224cef0fd5d60cf339a91ad34f3aece4d4be55de9947c31698c14d399f9d1727d07
-
SSDEEP
24576:F39WkOyHutimZ9VSly2hVvHW6qMnSbTBBhBMN:59qHPkVOBTK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d8964bcfca3565c73b50bc677629cde912258c23337ee5525017a5799fb175c5N.exe
Files
-
d8964bcfca3565c73b50bc677629cde912258c23337ee5525017a5799fb175c5N.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ