Static task
static1
Behavioral task
behavioral1
Sample
40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680.exe
Resource
win7-20241010-en
General
-
Target
40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680
-
Size
694KB
-
MD5
25ae131be523e2c8f5cf3a2530702415
-
SHA1
316994241b1cfef4715e5dcd4164c7160b6237d3
-
SHA256
40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680
-
SHA512
fe69c7f8bd1ade4718a44d354ae6d7edadd37c819db5c18371dbd9891ffb5cb4c1765a1c822de5acab26887f1dbd5d603f5bb898e8f2ad9931e7712de32d8735
-
SSDEEP
12288:fBQ8wR8WYpebEwnDbDYgt2B+FGD0BDMhndZ8ypSD6SluTVGLAlcv7A8WFfcj+0oS:5qOWIC1n/DJl+oAhdZ8yp66cIkLc6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680
Files
-
40566b3e8b25a3a39bb006030305822f220d7d34ba201e97d1f6d178f6cdb680.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
L_YmjA Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
L_A0jL Size: 691KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE