Static task
static1
Behavioral task
behavioral1
Sample
d579de4f05943e9325ec7b6c1b30b25d3bacab01f61916321ab272439c8f373b.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d579de4f05943e9325ec7b6c1b30b25d3bacab01f61916321ab272439c8f373b.exe
Resource
win10v2004-20241007-en
General
-
Target
d579de4f05943e9325ec7b6c1b30b25d3bacab01f61916321ab272439c8f373b
-
Size
64KB
-
MD5
a0fd266272c53275584c1c6be66443d6
-
SHA1
f64d2f347079dfc094a94d48fe68e642a15d9399
-
SHA256
d579de4f05943e9325ec7b6c1b30b25d3bacab01f61916321ab272439c8f373b
-
SHA512
db1c80a0dba350681cae48cb32e24cd62549ad52d591271b8e6022a840a3cfc9f1763e40e8d664f3f7d39f47745a327a564771fc750b07943dcfd8f388cc3c7e
-
SSDEEP
768:LQgp4ywuw4X9JIdKbUI0a4jM1wy+H8E9xcWBF2p/1H5nXdnhUxg84xlWK:zBXYdo05M1wxV992LT2+lWK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d579de4f05943e9325ec7b6c1b30b25d3bacab01f61916321ab272439c8f373b
Files
-
d579de4f05943e9325ec7b6c1b30b25d3bacab01f61916321ab272439c8f373b.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 132KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.kofbl Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.l1 Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ