Static task
static1
Behavioral task
behavioral1
Sample
789dedcd67de0e5a7515288ffcb1709167b3f11a391bcdd70dcd802f42ea6bc8.exe
Resource
win7-20240903-en
General
-
Target
789dedcd67de0e5a7515288ffcb1709167b3f11a391bcdd70dcd802f42ea6bc8.exe
-
Size
65KB
-
MD5
e80443f2906b7a61900a7ba2c52939d3
-
SHA1
617be663fea1f9d029cf3516308c77c9cb146b09
-
SHA256
789dedcd67de0e5a7515288ffcb1709167b3f11a391bcdd70dcd802f42ea6bc8
-
SHA512
fe8dcce4c82997fbbc44b39c1ae1ac51f85e84e9b7c44c1235c8f9cbd6f704484aa58343306d00114a9291b6ef83292d5c67212edc492f0f740e003a99b3578e
-
SSDEEP
1536:SP5EBGU9vmYFOjcOSocwwht0dCw8uz/5ZTg06HCO3Am7:u5EBFeOOQOSzws+hVdHOQy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 789dedcd67de0e5a7515288ffcb1709167b3f11a391bcdd70dcd802f42ea6bc8.exe
Files
-
789dedcd67de0e5a7515288ffcb1709167b3f11a391bcdd70dcd802f42ea6bc8.exe.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE