Static task
static1
Behavioral task
behavioral1
Sample
079d00989b85d75920ba27f0afe1c148fb6e1ff16917a72d10e340832aa51109.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
079d00989b85d75920ba27f0afe1c148fb6e1ff16917a72d10e340832aa51109.exe
Resource
win10v2004-20230220-en
General
-
Target
079d00989b85d75920ba27f0afe1c148fb6e1ff16917a72d10e340832aa51109
-
Size
3.2MB
-
MD5
b3558604415bc0c38e2eb34db8b70141
-
SHA1
2b22d2cf9db5d134a49176ae8183ea220f6aa987
-
SHA256
079d00989b85d75920ba27f0afe1c148fb6e1ff16917a72d10e340832aa51109
-
SHA512
f8680c783485d9190658738638c34e81468c16f45a21e9ddef655786346e01c52c086ce18f3e8c7dc5b0dd0d017b03503d639c7a410fdeb0d0cf8624f0375dcc
-
SSDEEP
49152:f3Ez1PMormtJRDYuSc1dXXbI8+s8KuqGaX0ToIBAUZLYuM:/Ez1EUmtJRDWA+JBAUZL7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 079d00989b85d75920ba27f0afe1c148fb6e1ff16917a72d10e340832aa51109
Files
-
079d00989b85d75920ba27f0afe1c148fb6e1ff16917a72d10e340832aa51109.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 581KB - Virtual size: 581KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE